Every workspace runs in an isolated tenant with encryption in transit and at rest, hardware-backed key custody, and quarterly third-party penetration testing. We publish our SOC 2 Type II report and current subprocessor list to any customer under NDA.

Out of the box we index shared drives, ticket queues, wikis, calendars, code hosts and email archives through a catalogue of 40-odd connectors. Anything else can be wired up with the indexing API in an afternoon.

Yes, when an admin enables it. Public lookups are routed through a proxy that strips workspace identifiers, and each answer cites the pages it drew from so you can check the source yourself.

Text documents, slide decks, spreadsheets, PDFs including scanned ones, meeting recordings, and structured exports up to 512 MB per file. Tables and charts are parsed into text so they stay searchable.

In the region you pick at signup — currently Frankfurt, Toronto, or Sydney — with backups held in the same jurisdiction. Deleted material clears the index within an hour and leaves cold storage after 30 days.

Aldermere mirrors the permissions already set in the source system and re-checks them at query time. If someone cannot open a file in the original tool, it will never surface in their results or citations.

We route each request to whichever hosted or self-managed model performs best for the task, and workspace admins can pin a single one. Every vendor contract forbids training on customer material, and the private deployment keeps inference inside your own tenancy.

Retrieval and answering are tuned for 34 languages, and you can ask a question in one language about a document written in another. Interface translations ship for 11 of them today.