Trust and security

Where your data lives

• •Your records live in Salesforce, in the Hyperforce region of your own org. We confirm the region of your org on request.
• •Workspace's application, database and files are hosted in the EU.

Backups

• •Private configuration and metadata are backed up every week to a private repository.

Who processes your data

• •Salesforce is the platform and system of record for all your records and the customer portal.
• •Supporting services: Workspace is hosted in the EU, and the services for error reports, product analytics and AI traces run in the EU.
• •AI providers supply the models behind Workspace. Workspace is not tied to any single model or supplier.

Our full subprocessor list is available on request.

How we use AI

• •Customer data is not used to train AI models.
• •Powie, the Workspace assistant, runs with zero data retention at the model provider.
• •Colleagues that act on their own are opt in: you switch each one on by choice.
• •You can connect your own AI tools to your data over MCP or our API.

Certifications

• •Powerhouse runs on Salesforce, which is certified for ISO 27001 and audited for SOC 2.
• •Powerhouse is listed on the Salesforce AppExchange and has passed the security review.

Availability

Salesforce publishes live status and incident history for every instance at status.salesforce.com.

Available on request

We walk you through these in a conversation, or share them under your agreement with us:

• •Our Data Processing Agreement and its subprocessor annex.
• •Per AI feature: which model, which data it reads, and where it is processed.
• •How Workspace keeps each customer's data apart.
• •AI traces and what is recorded.
• •Answers to your security questionnaire.

Contact

For any security or privacy question, a DPA or a questionnaire: security@usepowerhouse.io.