Your skills and data
Who owns what, who can see it, and what we don't claim yet.
For your review
- Who owns what
- Makers own their skills. Trilly never sees your chats. Ownership
- Does Trilly train AI on your data?
- No. Our data processing addendum says so. Training
- What we don't claim
- No SOC 2 or ISO 27001 yet. The database disk isn't encrypted. What we don't claim
More answers: for your review
- What goes to Anthropic
- Each version's files, private skills included, for our safety checks. What Anthropic receives
- Who can see a private skill
- Your members, and Trilly's checks using Anthropic's AI. Never search or other workspaces. Private skills
- Copies and shared copies
- Each page download has a code; private ones have marks. No public search yet. Copies of a skill
- Audit log
- Changes to your skill list, rules and requests, and each private skill's versions. The audit log
- Export and deletion
- Export any time. Close the workspace and we delete it, with a few exceptions. Taking your data out
Who owns what
- Skills you add or buy. Their makers keep ownership. Your people get a licence to use them: personal, for your team only if your plan says so, and never to share or resell. Terms of use, section 6.
- What your AI writes. Trilly never sees your chats. Our privacy policy says we never collect "what you type into your AI app, what your AI writes back, or the files you share with it". Your AI sends Trilly only the words of a search (used for that search and not stored), how a task went (and a result number you agree to send), settings and profile details you ask it to save, and feedback someone chooses to send. How information moves. Your use of an AI app is also covered by that app maker's own terms.
Show the rest: Who owns what
- Skills you make. Our creator terms say: "You keep ownership of your skills." Trilly gets a worldwide, non-exclusive, royalty-free licence to store, scan, review and test each version, and to deliver it to the people allowed to use it. It lasts "while the skill is listed, and after that for copies people already have". Creator terms, section 2.
- What the licence also covers. Adding Trilly's reporting section, a per-copy code and a signature to each copy, and showing the skill's listing, examples and screenshots on Trilly and in Trilly's own promotion.
- Skills your company makes. Trilly's terms give Trilly no ownership of a private skill. They don't decide who owns it between your company and the person who made it.
No training on your data
Trilly doesn't train AI models on your company's data. Our data processing addendum, section 4, says: "We do not sell your workspace information, use it for advertising, or use it to train AI models." The licence makers give Trilly for their skills doesn't include training AI either.
What Anthropic receives
Trilly sends each new version of a skill to Anthropic's AI for our safety checks, before your people can add it. That includes your company's private skills.
- What it receives. The text files of each version: SKILL.md, its reference files and its scripts. The behaviour test also sends the skill's demo question and a made-up customer's details. Whatever is written in those files goes with them.
- What it never receives. Anyone's conversations with their AI, and your people list.
- What it may do with them. Trilly uses Anthropic's API under Anthropic's commercial terms. They say: "Anthropic may not train models on Customer Content from Services." Trilly is the customer there, and the skill files are that content. The terms also treat them as Trilly's confidential information.
- How long it keeps them. Anthropic says it deletes what it receives through its API within 30 days. If something is flagged under its usage policy, it may keep it for up to 2 years and its safety scores for up to 7, and the law can require longer.
From Anthropic's commercial terms (in effect from 17 June 2025) and its privacy centre (updated 1 July 2026), checked 24 October 2026. Anthropic is in the United States: the companies that help us run Trilly.
Private skills
- A private skill is served only to your workspace's active members, and only while the workspace is open.
- It never appears in search, public pages or sitemaps, or in another company's workspace. Trilly is built so it can't be published or sold.
Show the rest: Private skills
- Trilly checks each version before your people can add it, as for every skill. Our DPA, section 5: "Only people at Trilly who need to see your workspace information can see it, and they must keep it confidential."
- When someone leaves your workspace, Trilly stops giving them its private skills. A copy they already downloaded stays on their computer. Trilly can't take it back.
Copies of a skill
- Every version has its own fingerprint. What your people add is exactly the version Trilly checked. A copy that doesn't match is never handed out, and the connector checks again on every load.
- Each downloaded copy carries its own code, linked to the account that downloaded it when someone is signed in (always, for a private skill). A copy downloaded while signed out is linked to nobody until it's kept in My skills. Trilly keeps only a scrambled version of that code. Each copy is signed, so a changed copy can be spotted. Someone can still delete the code from their copy.
Show the rest: Copies of a skill
- A private skill's copy that a member downloads or pastes from its page also carries visible marks, with a number only Trilly can trace to that member. A folder an admin downloads for everyone carries none. Paid copies get their buyer's marks once paid skills open.
- Trilly's leak finder looks for those marks in public code on GitHub and in text people send us. Trilly checks each find and tells the skill's maker, or a private skill's owners and admins. A private skill's words are never sent to GitHub. The GitHub search isn't live yet.
- For a private skill, the takedown notice is your company's to send, and Trilly has it ready in your console. Trilly sends it for you only if one of your owners says yes there, and that yes is in your audit log.
The audit log
Your workspace's audit log records changes to its people, seats, skill list, rules and settings, with who, when, from where, and before and after. That includes a skill made private, a skill added to or taken off your list, and each request and decision. The log holds each new version of a private skill too: who uploaded it, and whether Trilly approved it. It can't be edited, and it's kept for at least two years. It doesn't record each time someone uses or downloads a skill. Company workspaces.
Taking your data out, and deleting it
- Owners, admins and auditors can export the workspace's data at any time, under Security, and for 30 days after it closes. The export holds people, groups, seats, your skill list, rules, requests, your team's questions and replies, sign-in and domain settings, agreements, invoices and the last two years of the audit log.
- The export is one .zip file. It also holds each private skill's own files, as Trilly approved its live version.
Show the rest: Taking your data out, and deleting it
- An owner can close the workspace under Security. For 30 days it can be reopened. Then Trilly deletes or anonymises its information within a day, private skills and their files included. Deletion waits while a legal hold covers anyone in the workspace. DPA, section 8.
- Billing and tax records we must keep by law stay for at least 7 years, and the audit log stays as a security record. Our file storage keeps a deleted file's earlier version for up to 90 days, so a mistake can be undone. Database backups roll off on their own within 400 days. We do not restore deleted workspace information from backups except to recover from a disaster.
What we don't claim
- We don't hold SOC 2, ISO 27001 or similar certifications yet, and we haven't had an independent penetration test yet.
- The database server's own disk isn't encrypted yet. Encrypting it is planned. Stored files and the off-site backup copies are encrypted. Where your information is kept.
- Every company's workspace is in the same Trilly database, kept apart by Trilly's own checks, not by a separate database for each company.
- No code or mark can stop someone copying a skill's words by hand.
If your company needs more for a review, contact us.