Frequently asked questions

Does Stratl see our prompts and customer data? Only if you send the originals. The SDK fingerprints content on your side; the record carries fingerprints. If you also upload originals so they can be re-hashed later, they go to custody storage under their fingerprint, never into the search index. Custody explained.

Can Stratl change or delete a record? No. Records are signed with a key the service cannot export, chained, and stored where the service has no delete permission. Every action Stratl takes on your evidence is itself a signed record. Integrity.

Can we verify without Stratl? Yes, with a free command-line tool, offline, no account. What it checks.

Does the design depend on AWS? No. It depends on a non-exporting key service, versioned no-delete storage and an independent timestamp authority. Today those are AWS for managed custody, and AWS, Google Cloud or Azure for your own. Custody.

What if the key service is down? Nothing is written; the SDK spools the record locally and sends it later. And the timestamp authority? The checkpoint is still signed and stored, marked as awaiting a timestamp, and a second authority and later retries are tried.

Is Stratl a compliance guarantee? No. Packs report which evidence fields support which controls and where the gaps are. Frameworks.

Does it slow down our agent? No. It is not in the request path. The SDK hashes locally and posts asynchronously with a short timeout; connectors pull on a schedule.

How do people get access? Email and a one-time code; four roles; invitations that require the invited mailbox. No SSO yet. Roles.

Where is data stored? Records, content, checkpoints and keys in the custody region you chose or your own cloud. The index and the API in one location for all workspaces. Regions.

What does it cost? Nothing during private early access. The early-access page is kept current by hand.

Is there a SOC 2 report? Not yet. The security page and its cross-linked claims are the control description until then.

Can we leave? Every exported bundle and pack verifies forever without Stratl, and a workspace can take custody of everything to its own cloud. Taking custody.