Your data stays on your network. Here is exactly what leaves it.
This page is written for the person who has to approve ArgusBot. It lists what each side holds, what travels between them, and what happens when something goes wrong.
What travels between your Edge and our cloud
| Message | Direction | What it carries | Masked |
|---|---|---|---|
| Question | Edge to cloud | The question, its thread, short excerpts your local search picked | Contact details |
| Lookup request | cloud to Edge | Which source to read, the query, and limits on rows, size and time | Not needed |
| Lookup result | Edge to cloud | Only the rows or text that lookup returned, cut to its limits | Contact details, at the Edge |
| Final answer | cloud to Edge | The checked reply, its confidence and sources, or nothing | Secrets and contact details |
| Answer summary | Edge to cloud | Masked question and answer, confidence, tokens used, for billing and quality | Yes |
| Settings | cloud to Edge | Channel tiers, brands, languages, hashed staff lists | Ids are hashed |
| Knowledge cache | both ways | Articles about your systems, encrypted with a key that expires hourly | Encrypted |
Never sent: passwords and tokens for your sources, raw files, database contents beyond a lookup's result, your search index, the full audit log.
Controls built into the product
Credentials stay local
You type source credentials into the Edge's own page. They sit in a vault encrypted with a key that never leaves that host.
Read-only by design
No connector can write. ArgusBot drafts and answers. A person makes every change.
Outbound only
The Edge opens one encrypted connection out, with mutual certificates. Nothing on your network accepts connections from us.
Masking at the source
Emails and phone numbers are masked at the Edge before a lookup result travels, and again on the final reply.
Off switch and wipe
Pause a channel or the organisation from the console. A wipe clears the Edge's knowledge and answer caches at once.
Retention you can see
Masked summaries are kept 180 days in the EU. Export them any time, or ask us to delete your organisation's data.
Questions from security reviews
Need a questionnaire filled in? Send it with your pilot request. To report a vulnerability, write to hello@argusbot.co.
Which AI model reads our questions?
Anthropic's Claude models, chosen per task. We hold the vendor keys, so you do not need a model contract of your own.
Can staff see things they should not?
Each channel has a tier and a set of brands. Documents carry the access labels of their source. An answer only uses what the asker's channel is cleared for.
What happens if we cancel?
Answering stops and the Edge's knowledge cache is wiped. Your sources, your index, your audit log and the channel connections stay with you. Knowledge we wrote about your systems can be exported for 30 days.
Can we host everything ourselves?
Not in the first release. You host the Edge, which holds your data. The answering engine is a hosted service.
Bring your security team to the pilot call
We walk through the Edge, the connection and the audit log on your own server.