Security and data

Customer conversations are sensitive, so Recordkite is built to keep as little as possible for as short a time as possible. This page is a summary. Our privacy policy has the full details.

What Recordkite can see

• Slack: messages, threads and emoji reactions in channels Recordkite has been added to, and the names, display names and email addresses of the people in them. Recordkite only logs Slack Connect channels you’ve mapped.
• Attio: the companies, people and deals it needs to match conversations, and your workspace members’ names and emails so it can recognise your team. It writes activities, notes, the Last Slack interaction attribute and, when you ask it to, new people.

What Recordkite keeps, and for how long

Data	How long
Slack messages	Encrypted, only until their conversation is written to Attio, and never longer than 7 days
Running summaries of ongoing conversations	Encrypted, so later messages can update them
Channel mappings and people links	While your account is open
Activity log (who did what, never message content)	While your account is open

Recordkite doesn’t keep a copy of your message history. Summaries and notes live in your Attio workspace, under your control.

Our logs record IDs and counts, never message content or summaries.

Encryption

Each organisation has its own encryption key. Slack and Attio access tokens and any messages waiting to be written are encrypted with it. Deleting your organisation deletes the key.

AI summaries

Recordkite uses AI models to group messages into conversations and summarise them. We send only the conversation content needed, and only to AI endpoints that keep no copy of what they receive or return (zero data retention). Your content is never used to train AI models. AI requests may be processed in the United States.

Every summary note ends with a line saying it was generated by AI.

Where data is stored

Our database is in the EU (Frankfurt, Germany). Messages waiting to be written to Attio are kept in Cloudflare’s EU jurisdiction. Requests are handled at the Cloudflare location nearest to you, and some providers may process data outside the UK, including in the United States, under appropriate safeguards.

See the privacy policy for our list of subprocessors.

Your team’s access

• Sign-in is by emailed link, so there are no Recordkite passwords to leak.
• Roles control who can connect workspaces, map channels and invite people. See Invite your team.
• The activity log records who connected, mapped, invited or linked what.

Questions

For security questionnaires, a DPA or anything else, email hello@recordkite.com.