Security & Privacy

At Datalinc, security is not an afterthought—it is the foundation of our multi-tenant architecture. We have designed the platform to ensure that your data, API keys, and customer information are rigorously protected.

Multi-Tenant Isolation

Datalinc operates on a strict Multi-Tenant Architecture (MTA). We utilize a Database Factory pattern at the core of our platform:

• No Cross-Tenant Queries: Every request you make—whether through the UI or via an AI Agent—is cryptographically scoped to your specific Center ID.
• Physical Separation: Your Virtual Databases and Shared Hosting files are physically segmented. There is no shared connection pool that can accidentally leak data between workspaces.

Encryption & BYOK (Bring Your Own Key)

We believe you should own your AI infrastructure.

• Encrypted at Rest: All LLM API keys (OpenAI, Anthropic, etc.) and SMTP credentials provided in the Agent Configuration are encrypted at rest using AES-256.
• In-Memory Decryption: Your keys are only decrypted ephemerally in memory during an active agent session. We never log or expose your raw keys.
• Data Privacy (No LLM Training): Because you bring your own API keys, your data is governed by the strict enterprise privacy policies of your chosen LLM provider. Your prompt data is never used by Datalinc to train foundational models.

Human-in-the-Loop (HITL) Safeguards

Autonomous AI is powerful, but it requires guardrails. Datalinc's Eve Agent framework enforces strict Human-in-the-Loop constraints on sensitive tools.

If an agent attempts to:

• Send an outbound email
• Modify or delete records in your database
• Execute an external webhook

The system will pause execution and stream an approval request to your chat interface. The action cannot proceed without a human explicitly clicking Approve.

Compliance Overview

Datalinc is built to align with global data protection standards:

• GDPR & POPIA Ready: The platform provides tools to permanently purge tenant data upon request (Right to be Forgotten).
• Transport Security: All data in transit is secured via TLS 1.3.

If you require detailed compliance verification or a Data Processing Agreement (DPA), please contact our enterprise support team.