Enterprise-grade data protection
Your firm’s intelligence should belong to your firm.
Village protects your work. Our controls are independently audited, every workspace is isolated, and nothing your firm puts in trains an AI model.
-
SOC 2 Type II
Independently audited. The report and subprocessor list are in our Trust Center.
-
No model training
We never use customer data to train our own or third-party AI models.
-
Isolated workspaces
Each workspace runs on its own machine, storage, and private network, and all data is encrypted at rest and in transit.
-
Agents that stay in bounds
Agents never sign in, sign up, or get past paywalls without your credentials, and every finding links to its source.
-
Agent history
Conversations and scheduled runs keep a record of what agents did.
-
GDPR and CCPA
We are committed to GDPR and CCPA compliance, and a data processing addendum is available on request.
Quick answers
Does Village train on my data?
No. Our Terms of Service and Privacy Policy commit that we never use customer data to train or improve any AI model, ours or a third party’s. Our model providers may process it only to complete your requests, never for their own training.
Which AI models process my requests?
Models from Anthropic and OpenAI. Requests reach them only through Village’s proxy, which meters usage without storing your prompts or responses, and neither provider may use your data for its own purposes, including training.
Do I have to give Village my firm’s internal data?
No. Agents work from public web sources and the datasets Village provides, so you can evaluate Village end to end without uploading a file or connecting an internal system. Connecting the data services your firm licenses is optional, and you decide when to do it.
Where does my data live?
In your workspace. Each workspace runs on its own machine, with separate storage and a private network, and all data is encrypted at rest and in transit. Workspaces are hosted in the United States.
Who can access my workspace?
On Analyst, a workspace belongs to one person. On Institutional, your team shares workspaces, and only the members you invite can reach them. On either plan, every request passes through a gateway that checks membership and issues short-lived access tokens.
How does Village help with MNPI concerns?
Agents work from public web pages, Village’s datasets, and the data services your firm licenses. They don’t sign in, sign up, or get past paywalls without credentials you provide, and every report links each finding to its source, so your compliance team can confirm where a claim came from before anyone acts on it.
Can I get your audit report, subprocessor list, or a DPA?
Yes. Our Trust Center publishes our SOC 2 Type II report, security controls, and subprocessors. A data processing addendum is available to business customers on request.
What happens when I delete a workspace?
Its machine, storage volume, and repository are deleted with it. Email hello@village.dev to delete a workspace with billing history, or to exercise data rights under GDPR or CCPA.
How do I report a security issue?
Report suspected vulnerabilities to security@village.dev. Include a description of the issue, the steps to reproduce it, and any affected workspace. Do not include passwords, keys, or other credentials in your report.