Security and data
Hosted in New Zealand. Honest about the rest.
Everything your organisation stores in Typestream lives in AWS’s New Zealand region. Some processing happens elsewhere, mostly the AI models; this page says exactly what, and why.
Where your data lives
Stored in New Zealand.
One region
The database, the article store, uploads, exports and backups are all in AWS Asia Pacific (New Zealand), in Auckland. So are the servers that run the API and background work.Encrypted
Stored data is encrypted at rest. Every connection is TLS, inside AWS as well as to your browser. Storage buckets block public access.Private by default
The database and workers sit in private networks with no inbound access from the internet. Secrets live in AWS Secrets Manager, never in code.
What leaves New Zealand
The AI runs overseas. Your prompts and chats go with it.
There’s no suitable model hosted in New Zealand yet, so the models that judge articles and answer in chat run overseas. Here is everything that leaves the country.
Prompts and chat content leave New Zealand. When you ask a question, your message, the subject’s profile and the AI’s working go to OpenRouter, which routes them to the model provider (Google’s Gemini for chat). Articles go to TypeSafe’s JEV to be judged; they’re public news, not your data.
Every model call asks providers not to collect or train on our data. Zero data retention, where a provider keeps nothing at all, is switched on for a model only where a provider offers it for that model; we’ll list which models have it before launch. Until then, assume a provider may keep prompts for a short time under its own terms, for abuse monitoring.
- VercelServing the web app: static pages from its worldwide edge network, and pages drawn per request in Sydney.Sees: Pages and requests as they pass through, and request logs. Nothing is stored there.Worldwide edge; server rendering in Sydney, Australia
- OpenRouterRouting model calls to the model providers below.Sees: Article text sent for judging, and the AI’s prompts, including your chat messages and subject profiles.United States
- TypeSafeJEV, the model that judges each article: through OpenRouter, or directly if OpenRouter fails.Sees: Article text and the questions asked of it.Outside New Zealand; to be confirmed before launch
- Google (Gemini, through OpenRouter)The AI in chat: planning questions, researching subjects, writing answers.Sees: The AI’s prompts, including your chat messages and subject profiles.Outside New Zealand
- StripeSubscriptions, credit packs, invoices and tax.Sees: Your billing contact and history. Card details go to Stripe directly and never reach Typestream.United States and other countries Stripe operates in
- ResendSending email: verification, invitations, alerts, digests and receipts.Sees: Recipients’ addresses and the emails’ content.The Resend region nearest New Zealand; to be confirmed
- Better StackError reports, service logs, uptime checks and the status page.Sees: Error reports, which carry request ids and never personal data, and service logs, which carry ids.To be confirmed before launch
- MicrosoftSigning in with Microsoft, if you choose to.Sees: Your name, email address and Microsoft account id, which Microsoft sends when you sign in.Microsoft’s regions for your account
Sign-in and access
Your people, your rules.
Single sign-on
Sign in with Microsoft, or with email and a verified password. Organisations can require their own SSO through Microsoft Entra ID or any OIDC or SAML provider, once their domain is verified.Roles
Owners, admins and members. Only owners and admins can invite people, change channels, set spending limits or buy credits.Private chats
Chats are private to whoever started them. Sharing one lets the rest of your organisation read it, and turning sharing off stops that at once.An audit log
Every change to subjects, monitors, channels, members, SSO and billing is recorded with who made it and when. Admins can read and export it.Staff access, logged
Typestream staff can view an organisation only to help with a support request, read-only, and each time is recorded in that organisation’s audit log.Tenant isolation
Every query on your data is scoped to your organisation, and tests check that one organisation can never read another’s.
Your data, your call
Export it, delete it, know how long we keep it.
An admin can export the organisation’s data as JSON and CSV at any time. Deleting the organisation takes effect at once and becomes permanent after 30 days, so a mistake can be undone.
Articles’ raw pages are kept for 90 days and their extracted text for two years; answers are kept while your organisation exists. Error reports never carry personal data.
Publishers can keep their site out of Typestream through robots.txt, and ask us to remove what we already have. How our crawler works.
How we build
Security is part of the work, not a phase.
Hardened edges
A web application firewall, rate limits, size limits on every input, and strict security headers, including a content security policy.Reviewed changes
Infrastructure is code, planned and reviewed before it’s applied. Dependencies and images are scanned for known vulnerabilities.Tested
Before launch, an independent firm tests Typestream, and every high or critical finding is fixed before sign-up opens.
Found something?
Report a vulnerability.
Write to security@typestream.nz with what you found and how to reproduce it. We’ll reply within two working days, keep you told as we fix it, and credit you if you’d like. Please don’t access other people’s data or disrupt the service while testing.
Read our privacy policy and data processing agreement.
See what the coverage says about you.
Start a 30-day trial with 2,500 credits, and watch your first subject in minutes.