The commitment
What it never stores is the structural half of the same promise, revoking us is the enforcement, the audit trail is the record kept in your account rather than ours, and who owns your data is the architecture underneath.
We do not log, cache, or persist response bodies fetched from your Worker.
Never log or cache a proxied response body is a coding rule in the product, not a policy in a document — which is the difference between a promise and a property.
What we store
Our own users and organizations. Our own subscriptions. Connection metadata — project, environment, endpoint, credential reference.
Nothing else.
What we never store
Your users. Your purchases. Your audit events. Your support mail. Your entitlements.
They live in your D1 and are fetched live, rendered, and discarded.
The tempting exception, named
Why the architecture makes this easy to keep
We do not want your data, and the architecture is arranged so that wanting it would not help.
Most reads go straight from your Worker to your browser and never reach our origin at all. What does pass through is what we aggregate or act on server-side — and that is the surface this commitment covers.
Credentials are the sensitive thing here
This application holds credentials to other people’s production systems. That is stated plainly in its own rules, and it is why:
Customer control-plane credentials are scoped, rotated, per environment, and never logged.
And they are revocable by you at any time, without asking us.
Every administrative action is audited
In your trail, not only ours.
Under the control-plane actor kind, carrying the connection id and the dashboard user’s own subject — so what did the management client do is a question your own database answers, separately from what your users did.
Denials are audited too.
What you can verify yourself
Query your own audit trail. Every call we make is a row in it, and reading the trail is itself audited.
Revoke and watch. The connection denies on the next request, and nothing anywhere needs our cooperation.