How we handle your data

Please don't enter anything that could put someone at risk

Don't type or paste the names, locations or details of people who could be harmed if they were identified: sources, informants, participants, colleagues or partners in contested areas. What you ask is sent to outside services (see below) and saved in your history. Ask about the situation in general terms instead.

What we keep

• Your account. Your email address and name, held by our sign-in provider (AWS Cognito). Access is by invitation only.
• Your conversations. Every question you ask and every answer you get is saved, so you can come back to it. They are visible to you. Administrators of the database could technically read them.
• Your settings and memories. Your role, default sources, colour palette, and any facts you confirmed the assistant should remember.
• Saved analyses and comments. Anything you save or write there, and who you shared it with.

This is stored in our own database, hosted on Railway. The application runs on Vercel.

Where your words go when you ask a question

• Claude, on Amazon Bedrock. Your question, your conversation so far and the passages we found are sent to Anthropic's Claude model, which writes the answer. It runs on Amazon Bedrock, inside Amazon Web Services, rather than through Anthropic's own service.
• Our search index.Your question is searched against the library's own index (Meilisearch). Where semantic search is switched on, its text is also sent to an Amazon Bedrock model to turn it into numbers for matching.
• Web search. When it is switched on in the source menu, your search terms go to a web search run through Amazon Web Services.
• Outside sources.When these are switched on in the source menu, your search terms are sent to them: ReliefWeb, Crisis Group, The New Humanitarian, Chatham House, SIPRI, USAID's DEC, HDX, FEWS NET and GDELT.

Web search and the outside sources are on by default. You can turn any of them off at any time, and keep the library only.

Each of these services has its own terms and policies for what it does with what it receives. We don't control that, and we haven't summarised it here because it changes. Please read theirs if it matters for your situation.

Your control

• Delete my data. On your account page, one control permanently removes your conversations, analyses, comments, memories and settings. It cannot be undone.
• Closing your sign-in. Deleting your data does not remove your sign-in account itself. Ask the person who invited you to remove it.
• Sources. Turn outside sources off in the source menu next to the question box.
• No history setting yet. There is currently no way to stop conversations being saved, only to delete them afterwards. We know that is a gap.

What this is not

Stability Operations is a commercial service. It is not built or approved for secured government networks, and it must not be used with classified or controlled information.

Answers draw on the library and, where switched on, outside sources, and they can still be wrong. Every claim is linked to its source so you can check it, and the assistant says so when the evidence cannot support an answer.