How your studio works. Plainly.

Your studio runs on managed, enterprise-grade cloud infrastructure (Cloudflare), the same class of infrastructure a large part of the internet runs on. Your dashboard, your agents, and all your stored assets and data live there. The AI generation runs through specialized providers we route to. What runs on our own machines is the build-and-training side, not your live data or your dashboard.

Why that matters: your studio does not depend on any single machine staying switched on. Your data sits on infrastructure built for uptime and redundancy.

Can it move to infrastructure you own? Everything you own is portable and exportable (see below). If you ever want a fully self-hosted version running on hardware or cloud you control, that is possible as its own separate project, and we would scope it when the time comes.

Everything that is about your brand is yours:

• the agents you create, and their avatars and voices
• your prompts and workflows
• your knowledge base and training material
• every piece of content the studio produces for you
• any improvements we make to your specific agents

What stays ours is the engine underneath: the generation pipeline, the compliance system, and the general tooling that runs every client. That is the machine, and it is not specific to you.

Your brand and everything it creates is yours. The machinery that runs it is ours.

If you build a hundred agents, those hundred agents are your property: their looks, their voices, their personalities, and everything they have made. If we ever part ways, you export them and keep them, along with all their content.

The one honest caveat: you keep the agents and all their assets, and to keep generating brand-new content from them you need an engine like ours (or the separate self-hosted build). Nothing you created disappears, and nothing gets locked away from you.

If we ever stop working together, you get a full export of everything you own, not just deletion on our side: your agents and their avatars and voices, your prompts and workflows, your knowledge base, your documentation, and all your content, in standard file formats. Where a trained model can be exported as a usable file, we include it. Then we delete your data from our side on a set timeline and confirm it in writing.

We route through several leading AI providers rather than betting on one, with a system that automatically picks the best one for each job. So the exact provider can change per task by design, which is how we keep quality high.

We are happy to share the current list and each provider's data policy for your records, and we only use providers that do not train on your data by default.

Your data, recordings, prompts, and interactions are used for one thing only: running and improving your own agents. They are never used to train another client's agents or any general AI model, not even anonymized. This goes into your agreement in plain language.

The outside providers we generate through are chosen specifically because they do not train on your data by default. On our side the rule is simple and absolute: your data is yours, and it never makes anyone else's AI smarter.

Security is built to a defined standard as part of your launch, not an afterthought.

Already in place

• everything runs over encrypted connections
• your data and assets are stored encrypted on enterprise-grade infrastructure (Cloudflare, independently audited to standards like SOC 2 and ISO 27001)
• credentials live in a dedicated secrets vault, never in code or on a personal device
• every client is fully isolated in their own separate space, so no client can ever reach another's data

Locked in before you go live

• multi-factor authentication on every account that can reach your data
• a private login for your team, not a shared link
• access logging, so there is a clear record of who touched what
• automated, encrypted backups and a written recovery plan, so a single machine failing never puts your studio or data at risk

Access on our side is limited to a named short list, and all of this goes into your agreement. A short security summary is available for your records.

This is a marketing content studio. It produces brand and marketing content. It does not store, process, or touch patient records, medical histories, prescriptions, or any protected health information (PHI). Because it never handles PHI, it sits outside HIPAA scope.

If that ever needed to change, it would be a separate, dedicated conversation with the right safeguards in place first.