Scopes, redaction, audit, indexing posture, compliance roadmap, and incident handling — in one place.
Project shape — graph, structure, decision and lesson candidates. Not source contents by default.
Stream events, Atlas nodes and edges, citations, and Capsule manifests. Encrypted at rest.
Personal, project, team, client, agent-visible. Boundaries enforced in product.
Author-visible diff between source slice and recipient view. Capsules and cross-scope promotions both.
Promotions, opens, revocations, and agent actions logged. Exportable to SIEM.
Available on Enterprise. No calls to ContextStream cloud during indexing or recall.
We use the following subprocessors to operate ContextStream. Material additions trigger advance notice for Enterprise customers; the list is updated when it changes.
CDN, Workers, and R2 object storage for the web client and marketing surfaces.
Bare-metal hosting for application and API workloads across Dallas, Amsterdam, Orangeburg, and San Jose.
GPU compute for model training and evaluation, plus a Postgres replica in Virginia.
Embeddings API for semantic search and intent retrieval.
Billing, subscription management, and payment processing.
Transactional email delivery (verification, receipts, notifications).
Email hosting for the ContextStream team.
Product analytics to understand usage and improve the experience.
Graph database for the knowledge graph and Atlas relationships. Self-hosted on our infrastructure.
Vector database for semantic search embeddings. Self-hosted on our infrastructure.
Source code hosting and CI/CD for the ContextStream codebase and release artifacts.
Team communications and internal coordination for the ContextStream team.
Type II audit underway. Scope and timeline available under NDA for prospective Enterprise customers.
Standard DPA. EU-region storage available on Team and Enterprise.
Not in scope today. Talk to us if you need a compliance sponsor on the roadmap.
DPA, security questionnaire, architecture review, procurement support.