Privacy & data processing

AI providers we call (external mode)

In external mode, TriagoAI sends the minimum text needed for a task (a ticket title/description, or a search query) to a large-language-model API:

• DeepSeek - used directly (DeepSeek API) or via the OpenRouter gateway.
• OpenRouter - an API gateway that may route requests to DeepSeek or other models, depending on configuration.

We select these providers for their published data-processing terms. As those terms can change, this section should be verified against the provider's current API data policy before relying on it for compliance. We do not use your data to train public models, and we disclose the full list of external processors you can reach from your deployment.

Local-only mode

When a workspace is set to local mode, all AI calls - agents, intake triage, resolution assistant - are routed to a self-hosted model (Ollama) inside your own infrastructure. No ticket data leaves your network. This is the option for regulated environments that require strict data residency.

Retention & security

• Passwords are hashed with scrypt; sessions use signed HttpOnly cookies.
• Role-based access control restricts what each role can read and do.
• Every mutating action is recorded in a tamper-evident, SHA-256 chained audit log.
• You can delete your workspace data on request; contact the operator of your deployment.

Terms of service (summary)

TriagoAI is provided on an as-is basis for demonstration purposes. You are responsible for your own data and for ensuring your use complies with applicable law. AI-generated suggestions are assistive: destructive actions always require a human to approve them. Formal certification (SOC 2, ISO 27001, etc.) requires a third-party audit and is out of scope for this demo.