Network Intelligence
SafePrompt collects contributed request data for shared threat analysis and IP reputation. Contribution depends on your plan and Intelligence Sharing setting.
What your plan contributes
- Free: blocked prompts contribute to network intelligence as a condition of the plan. Safe prompts do not enter the intelligence sample store.
- Starter and Business: Intelligence Sharing starts on. While it is on, safe and blocked prompts contribute.
- Paid opt-out: switch Intelligence Sharing off in Settings, Privacy and Data Controls to stop contributing new samples.
When deployment session tracking is enabled, a session token requests per-turn storage separately from network-intelligence contribution. Turning sharing off does not turn off validation or its request metadata.
What an intelligence sample contains
- Submitted prompt text and the client IP supplied in
X-User-IP. - Prompt and IP hashes, prompt length, timestamp, and validation result.
- Threat categories, confidence, account association, subscription tier, and session metadata.
- A browser or client category derived from the user-agent header.
Send the actual end-user address through your trusted server or proxy configuration. A server address or SDK fallback cannot identify the end user. The API key stays on your server.
IP reputation
SafePrompt uses stable, keyed IP hashes to correlate contributed requests with a reputation record. Paid plans have IP-reputation controls, including an optional auto-block setting. A matching hash can affect a verdict when those controls are enabled.
IP hashes do not rotate every 24 hours. They are pseudonymous personal data; hashing an address does not make the record anonymous.
Published retention windows
The privacy policy sets out the retention commitments and data-rights request process.
| Data | Published window |
|---|---|
| Intelligence prompt text and raw IP | 24 hours |
| Prompt and IP hash records | 90 days |
| Conversation sessions | Two hours idle, at most 24 hours |
| API logs | 30 days |
Dashboard/API deletion does not remove retained hash records separately. These records remain pseudonymous personal data under our 90-day retention policy. For a request concerning them, contact [email protected]. Applicable erasure and objection rights remain subject to legal conditions and exceptions.
Shared analysis and your integration
Contributed samples support attack-pattern and campaign analysis. A sample from one account does not establish that a new pattern has reached another account's live validation path. Test the inputs and error handling your application depends on.
Read the quick start for request and verdict handling, and the privacy policy for inference processors and international transfers.