Archilas runs on Vercel in Frankfurt (fra1) with a Neon Postgres database. Connector tokens are encrypted with AES-256-GCM. You can delete one note, one synced item, a whole source, or your account. Backups expire within 30 days.
Where data goes
- Hosting: Vercel, region fra1. Database: Neon Postgres.
- Gmail, Calendar, and Drive connect through Composio. Slack, GitHub, Notion, and Linear use their own OAuth apps.
- To write an answer, the question and matching snippets go to a model provider through OpenRouter.
- Email is sent with Resend. The full list is on the privacy page.
How it is protected
- Connector tokens are encrypted with AES-256-GCM.
- Connectors only create webhooks in your tools, and remove them on disconnect.
- Prompt hooks keep at most the first 4,000 characters; transcripts are capped at 1 MB and secrets are redacted on the server before storage.
- Notes are not used to train a model.
How to delete
- One note: archilas.forget, DELETE /api/v1/notes/{id}, or the memory page.
- One synced item: from the memory page.
- A source: disconnect it. Archilas removes its webhooks, revokes the grant where the provider allows, and deletes what it synced.
- Everything: delete the account. Workspaces you own, connections, items, transcripts, notes, and keys go with it. Backups expire within 30 days. A hash of the email is kept for 90 days to stop free-plan abuse.
More detail: deleting agent memory.
Questions
- Where is Archilas hosted?
- On Vercel in the Frankfurt region (fra1), with Neon Postgres.
- How long until deleted data is gone from backups?
- Backups expire within 30 days.
- Does Archilas train AI on my data?
- No.