> ## Documentation Index
> Fetch the complete documentation index at: https://docs.velatir.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data Storage & Encryption

> What Velatir stores, how it is encrypted, and how your data stays separated.

## What Velatir Stores

For every trace, Velatir keeps the context it needs to monitor AI usage and produce an audit trail. The content of prompts and responses is treated separately, and is not stored unless you turn on Save session data.

| Always kept                                       | Kept only if you opt in                  |
| ------------------------------------------------- | ---------------------------------------- |
| Which service was used and the trace direction    | The content of prompts and responses     |
| The agent assessments and outcomes                | Function arguments and detailed metadata |
| Timestamps and the workspace the trace belongs to |                                          |

See [Data privacy](/security/data-privacy) for how to choose your default and set a retention period.

## Encryption and Your Keys

When you keep session content, it is protected with strong, industry-standard encryption, and your organisation holds the keys.

<CardGroup cols={2}>
  <Card title="Your keys" icon="key-round">
    Create encryption keys for your organisation in Settings. Content is encrypted to your key.
  </Card>

  <Card title="Private key stays with you" icon="lock-keyhole">
    The private key needed to read content stays on your side. Velatir cannot read stored content without it.
  </Card>
</CardGroup>

This means even Velatir cannot read your session content. Only people in your organisation, holding the private key, can.

## Tenant Isolation

Every organisation's data is separated at the data layer. Your traces, sessions, and settings are scoped to your organisation, and there is no path for one organisation to reach another's data.

## Retention

If you keep session content, you choose how long to retain it. When the retention period passes, content is deleted automatically. This keeps you holding only what you need, for only as long as you need it.

## Data Exports

You can request an export of your data under **Settings → Data exports**. This supports your own record-keeping and helps you respond to data subject requests under GDPR.

***

<CardGroup cols={2}>
  <Card title="Data privacy" icon="shield" href="/security/data-privacy">
    Scrubbing, audit logs, and access controls.
  </Card>

  <Card title="Organisations & workspaces" icon="building" href="/platform/organizations-and-workspaces">
    How your account is structured.
  </Card>
</CardGroup>