Data Flow & Residency
Where operational data flows and where it is stored.
- Data flows — operational state and execution history go to KVS logging plus DB (tMQLog, tSkillExecution), with a 5-min heartbeat.
- FDE Box boundary — credentials and sensitive data stay inside the FDE Box and are not sent externally.
- Residency — storage region is customer-selectable (default: Japan).
- Retention — unlimited by default; automatic deletion schedules are available by agreement.
- Personal/sensitive data — not stored in principle; stored only by agreement.
- External LLM data — scope is configurable and confidential data is masked (see Model Provider Policy).