# How Forematter handles your data

> Data handling in plain English: UK storage, per-company isolation, no training on your content by Forematter, conversation privacy rules, staff access, subprocessors and deletion.

Source: https://forematter.com/trust/
Updated: 2026-09-28

Forematter is in development and not open to customers yet. This page describes how the product handles data today, and it will be kept up to date as that changes.

## Where your data lives

Documents, onboarding journeys, questions and completion records are stored in a UK data centre (London), on Supabase infrastructure. To answer a question or build a module, the relevant text is sent to the AI providers listed under subprocessors below, only for that request.

## Every company is isolated

Each company's data is separated by row-level security enforced in the database itself, and by company-scoped storage paths for files. Server code fails closed: a request without a verified company context gets nothing.

We attack our own setup. An automated test suite runs cross-company reads and writes, cross-department visibility probes, revoked-account access and documents with hidden instructions against the product.

## Your content and AI training

Forematter never uses your content to train AI models. Documents and questions go to our AI providers only to answer the request in front of them.

## The assistant doesn't guess

Answers come only from your approved documents and confirmed company facts, and every answer shows its source, when it was last updated and who owns it. When the evidence isn't good enough, the assistant says so and routes the question to a named person instead of inventing an answer.

## Who can read assistant conversations

By default, an employee's conversations with the assistant are readable by that employee only: not their manager, not their company's admins, and not other colleagues. The database enforces this, not just the interface. The one exception is a question the assistant can't answer: that single question is sent to the person who owns the topic (or to the employee's manager if nobody does) so they can reply.

A company can choose to let its admins and each employee's own line manager read that employee's conversations. If it does, employees are told before their next question and can't ask anything until they acknowledge it; only what they ask after that can be read, and a notice stays visible alongside every conversation. Every time someone opens a conversation it is recorded, and the employee can see who read it and when. Access follows the current reporting line (a former manager loses it the moment the line changes), and it never extends to other colleagues, to managers outside the employee's reporting line, or to content owners.

## Forematter staff access

Forematter staff can't see anything inside your workspace unless one of your admins allows it. Support access is read-only, lasts as long as the admin chooses (up to seven days), can be ended at any moment, and covers your setup and content: documents, journeys and the people directory, without email addresses or phone numbers. It never includes anyone's assistant conversations or questions. Every section a member of staff opens is listed for your admins.

## Subprocessors

- Cloudflare: website hosting, and first-party visit counts on the public pages
- Supabase: database, authentication and file storage (London region)
- Anthropic: answer and onboarding-module generation
- Voyage AI: search embeddings
- Resend: transactional email
- ScriptGrain: optional brand-voice styling for modules

A data processing agreement including this list will be available before any pilot.

## Retention and deletion

Deleting a workspace removes its documents, files, conversations and generated content.

Completion and acknowledgement records are append-only: they capture the exact wording shown and the exact version completed, and nobody, including us, can edit them afterwards.

## Reporting a security issue

Found something? Email [security@forematter.com](mailto:security@forematter.com) and you'll get a human response within one working day. We'd rather hear it early. There's also a [security.txt](/.well-known/security.txt).