Your data is yours. Here's how Multiply protects it.
Encryption
All data is encrypted at rest and in transit.
AI training
Multiply does not train AI models on your data or conversations. What you put in stays private.
Data retention
API inputs and outputs are automatically removed from AI provider systems after 30 days.
Private vs. organisational data
Multiply keeps two categories of data separate:
Private data - your personal connections, such as your Gmail or Outlook mailbox, and your private tasks. Email can only be searched in your own private tasks. Personal connections are never available to your organisation, your team or Multiply staff.
Organisational data - files uploaded to workspaces and projects, meeting transcripts saved to a workspace, web research, organisation connections and integrations like Sharpr. This is shared across the workspace or project it belongs to and available to your team.
Anything your agents read through a personal connection can still appear in a task that others see, for example if you move a task into a project. Only share what you're allowed to share.
Connected apps
Connected apps such as HubSpot or Google Calendar are reached through Pipedream Inc., a US-based processor, so data read through them leaves the EU. Agents can only use read-only actions in connected apps. Connected apps are available on selected plans.
Compliance
GDPR compliant
ISO 27001 certification in progress
SOC 2 compliance targeted
AI providers
All AI providers used by Multiply are SOC 2 compliant.
API keys and credentials
When you connect third-party services such as Sharpr, your API keys are stored with AES-256 encryption. Multiply staff cannot access your keys after entry.