Legal
Security at Intrascope
Last updated: 09/06/2026
Whether your team connects its own API keys or uses managed usage through Intrascope, our security approach is designed to protect your workspace data, access permissions, and AI workflows.
Data Ownership
You retain full ownership of all data created or uploaded inside Intrascope. We do not analyze, sell, or use your data for training AI models. Your content exists only to support your work inside your workspace.
Workspace Isolation
Each organization operates inside a fully isolated workspace. There is no shared data layer between companies. This ensures that your projects, conversations, and usage data are accessible only to your team.
API Key Protection
API keys are encrypted and never exposed. Keys are visible only once during input and cannot be viewed again from the frontend. If a key needs to be changed, it must be replaced with a new one. This approach prevents accidental leaks and unauthorized access.
Managed Usage Security
For teams using managed usage, Intrascope handles model access through a centralized billing and usage layer. Your team does not need to manage separate provider accounts or expose provider credentials. Usage is processed only when initiated by users inside your workspace, and admins can monitor usage, balance, and model access from one place.
Encryption and Infrastructure
All data in transit is protected using secure encrypted connections. Sensitive data stored on servers is encrypted at rest. Passwords are securely hashed and never stored in plain text. Access to production systems is restricted and continuously monitored.
Secure AI Communication
Intrascope securely routes AI requests based on the model your workspace uses. For BYOK workspaces, requests are routed using your own provider API keys. For managed usage, requests are processed through Intrascope's managed access layer. Requests are executed only when initiated by users. There are no background calls, hidden prompts, or unapproved usage.
No AI Training on Your Data
Your data is never used to train models or improve prompts. All conversations and manifests remain private to your organization.
Data Deletion and User Rights
You can request data export or permanent deletion at any time. Data is removed in accordance with applicable privacy regulations and is never shared with advertisers. See our Privacy Policy for details.
Security FAQ
Who owns the data stored in Intrascope?
You do. All data created or uploaded inside Intrascope remains the property of your organization. Intrascope does not claim ownership and does not use your data for analytics, marketing, or AI training.
Is our data isolated from other companies?
Yes. Every organization operates inside a fully isolated workspace. There is no shared data layer and no cross access between companies.
Can anyone see our API keys?
No. API keys are visible only once at the moment they are added. After saving they are immediately encrypted and can never be viewed again from the frontend. Even workspace owners and administrators cannot see existing keys.
What happens if an API key is compromised?
You can revoke the key at any time at the provider level and replace it with a new one inside Intrascope. Old keys are rendered unusable.
Are API keys shared with third parties?
No. API keys are used only to execute requests you explicitly initiate. They are never shared, sold, or reused for any other purpose.
Is data encrypted?
Yes. All data in transit is protected using secure encrypted connections. Sensitive data stored on servers is encrypted at rest. Passwords are securely hashed and never stored in plain text.
Does Intrascope read or analyze our conversations?
No. Conversations and manifests are stored only to support collaboration and context inside your workspace. They are not analyzed or reviewed by the Intrascope team.
Is our data used to train AI models?
No. Your data is never used for training models, improving prompts, or building datasets.
Which AI providers do you support?
Intrascope connects to external AI providers using your own API keys. Supported providers may include OpenAI, Anthropic, Google, xAI, and others depending on availability.
Are there any background or hidden API calls?
No. Requests are executed only when initiated by users. There are no background calls, automated usage, or hidden prompts.
Is managed usage secure?
Yes. Managed usage lets your team access supported AI models without managing separate provider accounts or exposing provider credentials. Requests are processed only when initiated by users inside your workspace.
Do we need to store API keys if we use managed usage?
No. If your workspace uses managed usage, your team does not need to add or manage provider API keys. Intrascope handles model access through a centralized usage layer.
Can we use both BYOK and managed usage?
Yes. Teams can connect their own provider API keys for direct control, use managed usage for simpler access, or combine both depending on workspace needs.
Where is payment data stored?
Payment details are never stored on Intrascope servers. All billing and subscriptions are handled by certified third party payment processors.
Can we export or delete our data?
Yes. You can request data export or permanent deletion at any time. Data is removed in accordance with applicable privacy regulations.
Do you sell or share data with advertisers?
No. Intrascope does not sell, share, or monetize user data in any form.
If you need deeper technical or compliance information, our team is available at support@intrascope.app.