Trust centre
Your data, in an environment dedicated to you.
Stored in Dublin and processed in AWS EU Regions. TenCrown is the data processor for your content, and your organisation is the controller.
Last updated: 9 November 2026
Stored in Dublin. Processed in AWS EU Regions.
| Storage | Your dedicated environment runs in AWS Europe (Ireland), eu-west-1, in Dublin. |
|---|---|
| AI processing | AI requests are processed in AWS EU Regions. |
| Encryption | A separate key for each customer, held in AWS Key Management Service. |
Dedicated to your organisation
| Servers | Your own servers. |
|---|---|
| Storage | Your own storage disk and document bucket. |
| Encryption key | Your own key. |
| Configuration | Your own configuration and sign-in settings. |
| Code runner | The code runner is a separate server. |
How your content is handled
| AI training | TenCrown does not use your content to train AI models. AWS states that Amazon Bedrock does not use your inputs or outputs to train models and does not share them with model providers. Read the AWS statement |
|---|---|
| AI retention | AWS lists the models whose inputs and outputs it retains for abuse detection. The Claude models we use are not on that list. Read the AWS list |
| Prompt logging | AI prompt logging and debug logging are switched off, so chat content is not written to our logs. |
| EU routing | AWS policies allow AI processing in EU Regions only. |
| Staff access | TenCrown staff have no routine access to your content. |
| Leavers | Disabling a user in Entra ID or Google stops new sign-ins at once. A session already open continues until it next has to renew: typically 60 to 90 minutes with Entra ID, and up to 8 hours with Google. |
| Backups | Hourly disk snapshots and nightly encrypted copies. Backups expire within 35 days. |
| Chat history | Stored in your environment and in your backups. |
| Web search | Your admin decides, role by role, whether staff can use it. Search queries go to public search engines. |
| Email connector | Read-only. It cannot send, change or delete mail. |
| Reviewing output | Staff should review AI output before relying on it. We provide an AI usage policy template for your organisation. |
Built on Amazon Web Services
| Hosting | Your workspace runs on AWS. |
|---|---|
| Availability | AWS publishes monthly uptime commitments of 99.5% for each server and 99.99% for workloads across two or more Availability Zones in a Region. Read the AWS service level |
| Audit reports | AWS publishes independent audit reports for its own infrastructure. |
| Certification | ISO 27001 and SOC 2 are planned. |
| Support | Business hours. |
What the workspace covers
If your organisation has a specific requirement, tell us on a call and we will confirm how it fits.
- Sign-in with Microsoft Entra ID or Google Workspace
- Switches for each tool, role by role
- A monthly AI allowance per user
- An audit log of admin actions
- Read-only Outlook and Gmail connectors
- Search across your own documents
The documents your reviewer will ask for
Email us and we will send them.
| Security summary | Request it by email |
|---|---|
| Architecture overview | See the diagram |
| Sub-processor list | See the list |
| AI usage policy template | Request it by email |
| Pilot outline | Read the outline |
| Data processing agreement | Signed before any personal data is processed. |
Ask for the trust pack
Security summary, architecture overview, sub-processor list, data processing agreement outline and AI usage policy template. Email us and we will send them.