Data and backups
Version 1.1 — Effective date: August 9, 2026
This is a courtesy translation. The French HTML version is the official version and prevails in case of any discrepancy.
One-sentence summary: keep your own copy of everything that matters. Savantis Agents guarantees neither retention, nor backup, nor restoration of your data.
1. Where your data lives
| Data | Location | Isolated per tenant |
|---|---|---|
| Conversations and sessions | Encrypted disk of the dedicated KVM virtual machine | Yes — a virtual machine and key specific to the workspace |
Local short-term memory (MEMORY.md, USER.md) | Encrypted disk of the dedicated KVM virtual machine | Yes |
| Durable Savantis memory | Central Savantis Memory service | Scoped by account; accessible only to Savantis client applications authorized for that account |
| Professional agent dossiers and progression | Encrypted disk of the dedicated KVM virtual machine | Yes |
| Files, artifacts, tool outputs | Encrypted disk of the dedicated KVM virtual machine | Yes |
| Browser profile, open sessions, cookies | Encrypted disk of the dedicated KVM virtual machine | Yes |
| Application preferences, durable queues | Local state of the dedicated KVM virtual machine | Yes |
| Configured secrets (connector tokens, keys) | Restricted-permission files (0600) in the virtual machine | Yes |
| Account, subscription, consents, aggregate counters | Control plane (Cloudflare D1) | Separate records |
The control plane contains no conversation content. Savantis Memory is separate from both the control plane and the virtual machine.
2. Backups — what is promised and what is not
What is not promised:
- ❌ no guaranteed backup frequency;
- ❌ no recovery point objective (RPO) or recovery time objective (RTO);
- ❌ no guarantee that a backup exists, is readable, is complete, or can be restored;
- ❌ no point-in-time restore offered on request;
- ❌ no guarantee of recovery after a deletion, intentional or not.
What is done: infrastructure backup scripts exist and are run as part of normal operations. They aim at operational continuity, not at individual recovery of a customer's content. A restore request is handled on a best-effort basis, without commitment, and may be refused.
3. Events that destroy data
| Event | Effect | Reversible? |
|---|---|---|
| 7 days of inactivity on a Discovery workspace | Destruction of the KVM virtual machine, encrypted disk, its key, local state, and access route. The account's durable Savantis memory remains until separately erased. | No for local state |
| Workspace deletion requested by you | The same complete destruction of the workspace; durable account memory is managed separately | No for local state |
| Account deletion requested by you | Deletion of workspaces and the account's Savantis Memory bank, subject to legally retained records | No |
| Termination for breach | Deletion after the period stated in the notice | No |
| Bug, failed migration, hardware failure | Partial or total loss possible | Not guaranteed |
| Browser profile reset | Loss of open sessions and cookies | No |
| Revocation of a professional agent | The professional runtime component is removed, but its data is retained | Yes, by reactivating |
| Suspension for insufficient balance | Access blocked, data retained | Yes |
| Cancelling a platform subscription | Downgrade to Discovery — the workspace then becomes subject to deletion for inactivity | See above |
Watch out for the most dangerous sequence: cancelling a paid subscription downgrades the workspace to Discovery; seven days without activity are then enough for the workspace to be permanently deleted. Export your data before cancelling.
4. What you must do
- Export regularly anything of value: documents, artifacts, notes, work outputs.
- Never store your only copy of a file in the Service.
- Do not rely on an agent's local or durable memory as an archive: it is a working aid, not a retention system.
- Keep your own keys and secrets in your own password manager. Secrets configured in the Service are deleted when you disconnect a provider or when the workspace is destroyed.
- Record your important configurations (scheduled tasks, connectors, strategies) somewhere other than here.
5. Portability and export
You may request a copy of the computerized personal information you provided to us, in a structured and commonly used format (s. 27, para. 3 of the Act respecting the protection of personal information in the private sector). Write to support@savantisai.com.
That legal obligation covers personal information; it is not a service commitment to provide a complete export, at any time and in an arbitrary format, of the entirety of your workspace.
6. Deletion on request
You can erase all durable Savantis memory from Settings without deleting your subscription or account. To delete a workspace or the complete account, use the command offered in the Service or write to support@savantisai.com, specifying the requested scope. Deletion is carried out within a reasonable time and is irreversible. Billing and tax records are retained for the legally required periods (section 6 of the Privacy Policy).
7. No waiver of your rights
Nothing in this policy reduces the legal warranties of the Consumer Protection Act or the rights the law grants you over your personal information.