Security and privacy

ai2team receives your company’s AI keys and the requests your developers make. This page explains what we do with each of them.

Encrypted keys

Provider keys are encrypted before they reach the database. Once saved, they are never shown to anyone, including the ai2team staff.

Editor tools: your code is not stored

For calls made by Claude Code, the extension and other tools, we do not store the text of prompts or responses. We only store token counts, the model, the person and the repository.

Chat: conversations are yours and expire

In the dashboard chat, conversations and files are stored so you can see your history, always encrypted. Only you can see your conversations; managers only see token counts. Everything is deleted automatically 90 days after the last message, and you can delete it earlier at any time. Creations (tools and slides) run in an isolated area, with no internet access and no access to your data.

Data isolated per company

Every database query is filtered by the user’s company. One company cannot access another company’s data.

Sign in with Google

Access uses your Google account. ai2team does not store passwords.

Data protection (LGPD)

ai2team acts as the data processor and your company as the controller. You can request an export or deletion of your company’s data at any time.

Found a vulnerability?

Write to security@ai2team.com.br. We review every security report.

Last updated: November 10, 2026