Your knowledge. Clear boundaries.

You choose the ground.

Bring in the files, messages, and curated Knowledge relevant to a project. Supported connections include Google Drive, Gmail, and Outlook. Selection is deliberate: a project does not need access to your entire mailbox or drive.

Access follows the project.

Organization membership and project access are separate. Project permissions determine who can see and act on shared work. Roles and scoped guest access help you bring in the right people without opening every project to everyone.

Your work does not train AI.

Groundforth does not use customer workspace content, project sources, messages, documents, or outputs to train our AI models. When you request AI assistance, only the selected project knowledge needed for that request is sent to an approved provider for processing.

AI assists. People decide.

AI uses the project sources and knowledge you select to synthesize, propose, and revise. People review consequential changes and retain responsibility for approval and external delivery. Sources and named versions give reviewers a clearer basis for their decisions.

Protection across the journey.

Groundforth uses access controls, encrypted transport, and infrastructure-managed encryption at rest. Connector credentials receive additional encryption protection. These are distinct from end-to-end encryption: authorized service processing still requires access to project content.

Our policy is that team access to your core work data is not routine. Operational access is restricted to authorized roles and audited paths. If resolving a support request requires us to inspect customer workspace content, our policy is to explain what access is needed and ask for your explicit permission before proceeding.

Uploads go through file validation and malware-screening controls before processing. Access and operational records support investigation and service reliability.

Deletion with a defined window.

Deleted customer content is retained for up to 30 days after deletion for recovery and cleanup, then removed. Records required by law, security investigations, or a legal hold may be retained for the relevant purpose and duration.

Groundforth Inc acts as a controller for account, contact, and service-administration information, and as a processor for customer workspace content processed on the customer's instructions. Our Privacy notice explains the distinction.

Let's talk about your requirements.

For questions about providers, processing locations, contractual data protections, or your organization's security requirements, contact our team. We will discuss the relevant arrangements with you without treating a product feature as a compliance certification.

Report security concerns through our security contact route. Please don't include credentials or sensitive project content.