Trust & Security

You’re always in control of what your assistant can do. Town treats trust and security as core to the product, not as an afterthought — your data stays protected, and you choose how much your Townie checks with you before it acts.

This page answers the most common questions about how Town handles your data and your permission. For the mechanics of how you grant and limit that permission, see the sub-pages below.

In this section

Modes & Approvals Security

Will Town email, schedule meetings, or message people without my permission?

You choose how much your Townie checks with you. You can have it ask first and wait for your go-ahead before an email, message, or calendar invite goes out, or let it act on its own. Town can draft replies, suggest messages, and prepare invites for you to review.

Defaults depend on where your Townie is working. Your own threads and threads with people you trust start on Auto: your Townie goes ahead with what you explicitly asked for, and asks first when an action goes beyond your request or looks unsafe. Other group threads start on Balanced, where only you can ask your Townie for help. Routines start on Auto too, and run without asking; switch a routine to Human in the Loop to review actions other people would see. You can change any of these anytime, and you can also set per-tool controls so specific actions always ask first.

You can also set up a trusted contacts list so your assistant can email specific people or domains directly, without approving each message. That list is opt-in and off by default — you choose exactly who it covers.

The exact way you grant that approval — thread access, routine modes, and per-tool controls — is covered in Modes & Approvals.

Does Town train its AI on my data?

Using your data for AI training is off by default, and we configure our AI model providers so your inputs and outputs aren’t used to train their models either. If you ever want to help improve Town, you can opt in with the Improve Town for everyone toggle in Settings → Privacy.
Google data is fully off-limits for training. Anything from Gmail, Google Calendar, or Google Drive is never used to train machine-learning models — a requirement of Google’s API Services User Data Policy, and a commitment Town stands behind.
We never sell your data.

Who at Town can see my data, emails, or messages?

Access is tightly restricted by design.

No Town team member has production database access. Full stop.
No one at Town can access your data by default — it’s encrypted at rest and in transit. Access only happens two ways: you approve it for support, or our CEO/CPO authorizes a one-time look at a single session during a security incident (very rare).
Your Townie only touches the data needed to do what you’ve asked. For email, it accesses only what’s required to act — organizing your inbox, drafting a reply, surfacing what matters — and never browses your inbox for any other purpose.

How is my data encrypted, and where is it hosted?

Encrypted everywhere. All your data is encrypted in transit (HTTPS/TLS) and at rest (AES-256). On top of that, especially sensitive items — like the access tokens for your connected accounts — get an extra layer of application-level AES-256 encryption.

US-hosted. Your data is hosted in the United States on Convex and AWS.

One honest note: this isn’t “zero-knowledge” encryption. Town’s systems work with your data to actually do tasks for you, so the service can process your content during normal operation. What we promise is that it’s encrypted, access is tightly controlled, and it’s only ever used to help you.

How long do you keep my data if I delete it or my account?

You can delete your account anytime from Settings.

We soft-delete immediately. The moment you delete, your account is deactivated, your routines stop, and your Town sessions are revoked.
Everything is permanently removed within 30 days.
The only exceptions are narrow ones — for example, if there’s an active legal hold, or a small set of security/audit records we’re required to retain.

Want to step back without deleting everything? You can disconnect any integration anytime from your settings — or revoke Town’s access directly from your Google, Slack, or Notion security settings.

Do you have SOC 2, a DPA, or compliance docs?

Security is built into how Town works, not bolted on. Here’s where things stand:

SOC 2 Type 2 — completed. Town has completed SOC 2 Type 2 certification for independently audited assurance of its security controls.
CASA — completed. Town has completed a Cloud Application Security Assessment, validated by an independent third party against the OWASP ASVS standard.
Google API Limited Use — compliant. Google user data is used only to provide Town’s services to you — never shared, sold, or used for advertising.

Bringing Town to a team with specific security requirements? We’re happy to talk — email support@corp.town.com and we’ll walk you through the details.

Where to find our security & privacy documentation

Doing a security review? These are the canonical resources:

Trust Center — trust.town.com for our controls, certifications, and to request documents.
Security overview — town.com/features/security .
Data Processing Addendum (DPA) — town.com/dpa .
Subprocessors — town.com/subprocessors (includes Convex).
AI model providers & no-training — town.com/ai-model-providers .

Encryption specifics

In transit: TLS 1.2 / 1.3.
At rest: AES-256-GCM, with an extra application-level layer of AES-256 encryption on especially sensitive items like your connected-account access tokens.

Data residency & transfers

Town is US-hosted (Convex and AWS). We don’t offer EU data residency today. International data transfers are covered by the Standard Contractual Clauses (SCCs) in our DPA .

For teams evaluating Town against enterprise requirements, here’s where things honestly stand today:

SSO / SAML — on the enterprise roadmap; no committed date yet. For Microsoft 365 tenants, admins can already manage access via Microsoft Entra.
SCIM (automated user provisioning) — not supported and not currently planned.
HIPAA / BAA — not available today.
GDPR — not available today.

If any of these are requirements for your organization, reach out to support@corp.town.com or via the Trust Center so we can talk through your needs and timeline.

Built-in protections

Beyond the controls you set, Town includes security measures that apply automatically:

Smart safeguards — When a routine has access to private data, untrusted input, and external communication tools, extra protections kick in automatically.
Input validation — Blocks known manipulation patterns in incoming content.
Output validation — Checks tool arguments before executing actions.
Account isolation — Routines can only access accounts you’ve connected.

Learn more in Security.

Does Town have a privacy policy?

Yes. You can read it anytime at town.com/privacy-policy . It explains exactly what information Town collects, how it’s used, and the safeguards in place to keep your data protected.