Data
What is stored, encryption at rest, what logs never contain, deleting data.
What is stored
- Agent configuration (system prompt, parameters), knowledge bases, and the content of ingested documents.
- Conversations and every message in them — kept until the conversation (via deleting the end-user) or the organization is deleted.
- Runs and traces — every step an agent took: calls to the model, tools called, tool results, the final answer.
- Usage figures (tokens per day, per agent, per model) — kept even after the end-user or conversation that generated them has been deleted.
Encrypted at rest
Three kinds of your secrets are encrypted before they're written to the
database, and the API never returns the raw value back — only whether
one is set (has_api_key, has_headers, etc.):
- An agent's LLM credential (
api_key). - An MCP server's auth headers (
headers). - Your organization's identity secret.
These are only decrypted at the moment they're actually used — calling the model, or calling an MCP server — never stored in a run's snapshot or in its trace.
Logs never carry any of it
System logs are operational data (timing, status, request ids) — never message content, prompts, answers, or any of the secrets above. A database query error doesn't leak its query parameters into a log line either.
Trace retention
Your organization has a "trace retention days" setting (see Usage & quotas), 30 days by default, set by the Harnix operator. Once a day, the step-by-step content (prompts sent to the model, tool calls and their results) of finished runs older than that is permanently removed — that run's status, duration, iteration count, token totals, its input and its final answer are kept. Conversations, messages and usage figures are not in scope here.
Deleting an end-user
Permanently deletes every conversation, message and run belonging to that end-user. The usage figures (tokens) they generated are kept in your organization's overall usage report — deleting a person doesn't retroactively change numbers you've already reported or been billed against. See Conversations & end-users for how.
Deleting an organization
Deleting an entire organization — every agent, knowledge base, conversation, run — is not a self-service action in the console today. Contact the Harnix team if you need an organization deleted.