We show you what we hide and what we don't.
This page shows where your data goes, what protects it, and what we do not claim. We checked the parts about AI Cloud against the app's own code on October 12, 2026.
AI Cloud runs on internet servers and opens in your web browser. The AI Box is a computer in your office. They handle your work in different places, so this page keeps them apart. Agents and AI Custom projects work differently again, and each has a part of its own below.
Example with made-up data
You type: Write a payoff letter for Maria Lopez. Her SSN is 482-55-1907 and the card on file is 4111 1111 1111 1111.
The AI sees: Write a payoff letter for Maria Lopez. Her SSN is [SSN-1] and the card on file is [CARD-1].
AI Cloud runs on outside servers. The Box sits in your office.
Three things decide where your work is handled: where the app runs, where your saved work is kept, and which computer runs the AI model. The model is the AI that writes the answer.
| The part | AI Cloud | AI Box |
|---|---|---|
| The app | Runs at a company named Vercel. You open it in your web browser. | Runs on a computer in your office. You open it on your office network. |
| Your saved work | Kept in a database at a company named Supabase. | Kept on the Box. It is not stored in the AI Cloud database. |
| The AI model | Built-in models run at Together AI, an outside company. With your own key, the company behind that key runs it. | Built to run on the Box itself. Your proposal lists any outside services the setup uses. |
| The internet | Every part runs on the internet. You need a connection to use it. | The Box software as we build it today checks for updates once a week and downloads models and software. That check does not send your chats or files. The Box is not sealed off from the internet. |
We checked the Cloud column against the app's code. For the Box, we checked how its software gets updates. The rest depends on your setup, and its proposal fills it in.
AI Custom: a custom project can use AI Cloud, an AI Box, or other services. The scope you approve lists the systems, providers, access, and data flows involved.
In AI Cloud, a message takes one of two paths.
Which path your message takes depends on what you add and what you pick. In chat and Tasks, each line on your record shows the path that answer took.
Protected
This is how AI Cloud works unless you change it. One of the built-in open models reads your message.
- Your browserYou type. Your message goes to SUDO over an encrypted connection.
- AI CloudThe app runs at a company named Vercel. The shield swaps out five kinds of ID numbers here, before anything else happens.
- Together AIAn outside company that runs AI models. Its computers run the open model. The model reads the text with the numbers hidden and writes the answer.
- Back to youSUDO puts your own numbers back in the answer. It saves the chat in your workspace and adds a line to your record.
External
In chat, when you pick a model that runs on your own key, which comes from your account with that company. In Tasks, whenever your workspace has a key from Anthropic. Tasks then run on Claude without asking. Also the marketing tool's high-quality pictures, which need no key.
- Your browserThe same first step.
- AI CloudThe shield still runs first. The answer is marked External on your record.
- Anthropic, OpenAI, or GoogleThe company whose key you added reads the text with the numbers hidden. That company's own terms for its models apply.
- Back to youThe same last step.
In chat, a helper marked Sensitive or Regulated is moved to a Protected model when one can work at that setting. If none can, only Regulated is refused. Tasks does not check the mark.
Other companies that handle AI Cloud data
- SupabaseSign-in and the database.
- VercelRuns the app. Scanned pages are read for text here.
- Together AIRuns the open models for Protected answers.
- StripeTakes payment.
- SiteGroundHosts the mailbox that sends your sign-in link.
- A company you chooseAnthropic, OpenAI, or Google, for calls made with your own key. One case needs no key from you: the marketing tool's high-quality picture setting.
We hide five kinds of ID number. Names go through.
Before a chat message or a task leaves AI Cloud, the shield swaps five kinds of ID numbers for stand-ins. The AI model works on the stand-ins. Then SUDO puts your numbers back into the answer.
It replaces
- Social Security numbers, written with dashes or spaces
- Individual taxpayer ID numbers (ITINs)
- Card numbers, checked with the same test that card networks use
- Employer ID numbers (EINs), written the usual way with a dash
- Bank routing numbers, when the word "routing" or "ABA" is close by
It does not replace
- Names. Maria Lopez went through as typed.
- Email addresses and phone numbers.
- Street addresses, birth dates, and account numbers.
- Numbers written in an odd way. An SSN typed as nine digits with no dashes is not caught.
- Anything inside a picture. Pictures are passed along as they are.
- Anything you give the marketing tool. The shield does not run there at all.
The shield changes what the AI sees. It does not change what you keep. Your saved chat holds exactly what you typed, numbers included.
The shield runs in two places only. One is chat, including passages pulled from a knowledge base, the files you upload once to ask questions of. The other is Tasks, the part of SUDO for jobs with several steps. Instructions you write into your own helper go to the model as written.
What AI Cloud keeps, and when it goes away.
Everything below is kept in a database at a company named Supabase. Each row is tied to your workspace, unless the table says otherwise.
| What | What is kept, and where | For how long | How it goes away |
|---|---|---|---|
| Chats | The full text of each chat, as you typed and read it. | Until you delete them. | Delete the chat in the app. |
| Knowledge bases | The text taken from each file, in short passages, with the file name. | Until you delete them. | Remove one file or the whole knowledge base. |
| Uploaded files | The file you upload is read once for its text and is not kept. A large file passes through a private storage folder on the way. The app tries to delete it after reading. A file that is uploaded but never read stays there. | Not kept, in the normal case. | Email us to have a stray upload removed. |
| Your own helpers | The name, instructions, and settings of each helper you write. | Until you delete them. | Delete the helper in the app. |
| Your model keys | Locked with strong encryption (AES-256-GCM) before they are stored. Unlocked on the server only at the moment of a call. Never sent to your browser. | Until you remove them. | Remove the key in the app. |
| Your record | One line for each recorded answer. It holds no message text. The record part below shows what it covers and what it misses. | While your account is open. | It is deleted with the account. |
| Account | Your email address and a workspace name. If you fill in the welcome form, also your name, role, line of work, firm name, firm size, and how you heard of SUDO. | While your account is open. | Email us to close the account. |
| Payment | Card details stay at Stripe. SUDO keeps your plan and a reference to you at Stripe. | While your account is open. | Cancel in the billing portal. |
| In your browser | A cookie that keeps you signed in. Also your light or dark setting, the last knowledge base you picked, and whether Interactive answers is turned on. No ad or tracking cookies. | Until you sign out or clear it. | Clear the site's data in your browser. |
Other customers cannot see your work.
This part is about AI Cloud. It covers who can see your work and how to remove it.
- Other customers
- Nothing. Every table that holds customer content has a rule in the database. The rule ties each row to one workspace. The app reads your chats and files under that rule.
- Inside your workspace
- Whoever signs in to a workspace sees everything in it. That means chats, knowledge bases, helpers, and the record. They can use or remove a model key you added, but they never see the key itself. There are no per-person or per-file permissions. Each email address that signs up starts its own workspace. There is no way yet to add a second person to one.
- SUDO
- SUDO runs the database. SUDO also holds the server secret that unlocks model keys at the moment of a call. So SUDO can technically read what is stored, the way the company behind any online service can. We do not use your content to train AI, and we do not sell it. If that kind of access is a problem for your work, ask us about the Box. Its proposal says who can reach it for support.
- Signing in
- You type your email and click the link we send. There is no password to reuse, guess, or leak. A cookie then keeps you signed in. We refuse sign-ups from throwaway email services.
- Deleting and leaving
- You can delete chats, files, knowledge bases, and keys yourself at any time. To close an account or have everything deleted, email us. When an account is deleted, the database removes its workspace, chats, knowledge bases, keys, and record with it.
- The marketing tool is different
- The app has a separate tool that turns your writing into marketing drafts and pictures. The privacy shield does not run on it. Up to 12,000 characters of what you paste go to Together AI as written. Its high-quality picture setting uses an outside company's picture model on SUDO's account, with no key from you. The app labels those pictures External.
- One more thing to know
- The research helper in Tasks can open public web pages. Those visits come from SUDO's servers.
Your record shows how answers were made. It has a few gaps.
The record is a list in your AI Cloud workspace. It helps you check where an answer came from. It does not check whether the answer is right.
- What a line shows
- The time, the model, and Protected or External. It also shows the helper, how much text went in and out, and how many values were hidden. It holds no message text.
- What gets a line
- Answers in chat and Tasks, and marketing pictures. The gaps are listed below.
- What gets no line
- A try that fails before it writes anything. A line that fails to save, which is dropped without notice. Text drafts from the marketing tool. Its pictures do get a line.
- What it never shows
- Which of your files an answer used. The record does not store that.
- Answers from your files
- The AI is told to point to the passage it used, with a mark like [1]. A pointer helps you check the answer. It does not prove the answer is right, so check the original before you rely on it.
- How long it stays
- While your account is open. It is deleted with the account.
The shield does not cover agents.
The Support, Sales, and Marketing agents do not run on AI Cloud. Everything above is about AI Cloud. This part is about those agents.
- The shield
- It does not run there. No ID numbers, names, or anything else are replaced.
- What the model reads
- Each message an agent handles, as it was written. That means the sender, the subject, and the full text of the email.
- Website chat
- It comes with the Support agent. It answers visitors on your site directly, with nobody checking first. It is told to answer only from your handbook. When the handbook does not cover a question, it is told to ask for an email address. Email replies and posts wait for your OK.
- Who runs the models
- Together AI runs the two open models each agent tries first. If both fail, the agent can switch to Claude at Anthropic.
- What that means
- Say the inbox you connect gets ID numbers, health details, or anything privileged. Those reach the company running the model as written. Ask us before you connect one.
A Box plan lists what runs inside and what connects out.
The AI Box is a computer in your office, bought or leased. It is built to run the SUDO app and the AI models there, on your own network. It does not keep your work in the AI Cloud database.
The Box is not sealed off. Its software checks for updates once a week and downloads models and software from the internet. That check does not send your chats or files.
Your proposal lists any other outside services the setup uses. It also says who handles updates, backups, and support, you or us. Ask us about anything it leaves open.
A Box starts at $12,500. Ask us about leasing.
We do not claim these eight things.
A security page is only useful if it also says where the edges are. These are ours. Our Privacy Policy and Terms of Service set out the rest in full.
HIPAA compliance.
We do not claim it for AI Cloud. If you handle patient records, talk to us before you upload any.
A SOC 2 report or an ISO 27001 certificate.
We have neither to show you. A provider's certificate is not one of ours.
That no outside company touches a Protected message.
Together AI runs the model. A Box is built to run the model in your office instead.
That the shield catches everything.
It replaces five kinds of number, by their pattern, in chat and Tasks. Names and everything else pass through, and the marketing tool is outside it.
That the shield covers agents.
It runs in AI Cloud only. Agents read each email as written.
A backup schedule, a recovery time, or an uptime figure.
We have not published any, and the service is offered as is.
Where the servers are.
We make no promise about the country or region where your data is stored.
That an answer is correct.
AI models make mistakes. Passage pointers and the record are there so you can check.
Ask a security question. A person answers it.
Some questions need a talk about your setup, like patient records, tax returns, or what a Box would connect to. Ask. If the honest answer is "we do not know yet" or "no," that is the answer you will get.