Security & data residency
Where your data lives, how authentication works, and how to keep workspaces inside your perimeter.
Data residency
Pick a region when you create a workspace:
- EU: server in Germany
- US: server in Virginia
Data, memory, and execution all stay in your chosen region. We don't move workspace data between regions.
Enterprise customers can request custom data residency (other regions, private infrastructure), contact sales.
We never train on your data
Geta.Team never trains models on your workspace content. Your conversations, documents, memory, and credentials are yours.
Dedicated server per workspace
Each workspace runs on its own dedicated server, not on shared multi-tenant infrastructure. This applies to every plan, not just Enterprise.
Authentication
Sign-in to the dashboard is magic-link only, we don't store passwords. The Security tab shows the active method and the two-factor authenticator app (coming soon).
- Magic link expires after 15 minutes, single-use
- 6-digit fallback code if the link doesn't open cleanly
- Sessions expire after 7 days
Workspace credentials
Workspace admin credentials are exposed only to you via the dashboard's Display credentials button. Never logged, never emailed in clear.
Self-hosted alternative
For zero data leaving your perimeter, the BYOK Self-Hosted edition runs the entire stack on your own infrastructure with your own LLM keys.