Skip to main content
Every workspace gets the same protections. Enterprise adds administrative controls on top.

​
For every workspace

  • Tenant isolation at the database. Each workspace’s data is separated with row-level security in Postgres, not just application code.
  • Per-workspace encryption. Secrets are encrypted at rest under a key unique to your workspace, so a problem elsewhere never touches your credentials.
  • Integration tokens are not stored by Henry. Your sign-in tokens for connected apps are held by the connection provider. Henry keeps connection metadata only.
  • Human approval for writes. Reads are instant; writes that change something wait for a person, unless you have chosen otherwise per tool. Spending always asks.
  • Secrets are redacted. API keys and tokens that appear in channel text are redacted before storage.
  • Prompt-injection defenses. Text that Henry reads from tools, web pages, and documents is treated as data, never as instructions.
  • No training on your data. Your data powers Henry for your workspace only and is never shared with other customers or used to train models.
  • Cost ceilings on every request and optional per-member spend caps.
Details for security teams are in the Developer Guide.

​
Your account

  • Multi-factor authentication with an authenticator app, per person, in Settings → Profile.
  • Google sign-in and email codes as alternatives to passwords.

​
Exporting your data

Admins can request a machine-readable archive of the workspace from Settings → Team settings → Export workspace data: conversations, knowledge, tasks, people, settings, and Slack attachments. Henry builds it in the background and emails you when it is ready. Download it from the same page within 7 days; the download re-checks that you are still an admin. Usage exports are on the Usage page. Audit log exports are described below.

​
Deleting your data

  • A channel’s learnings: /henry capture purge in Slack.
  • A member’s access: remove them from Settings → Members. See Members and roles.
  • A connection: disconnect it from Integrations.
  • A whole workspace or account: email support@usehenry.ai. Deletion is provable and includes upstream providers: connection accounts, Slack tokens, and Stripe records.

​
Retention

  • Workspace export archives: 7 days.
  • Agent Browser screenshots: 30 days.

​
What Enterprise adds

Enterprise is enabled per workspace when you work with our team. It unlocks three admin surfaces:
  • Single sign-on with Okta, Microsoft Entra ID, or any SAML 2.0 identity provider, with domain enforcement. See Single sign-on.
  • Audit log at Settings → Audit log: every tool call Henry made (who, which tool, which connector, when, outcome, what it touched) plus admin settings changes such as SSO, model keys, members, and exports. Filter by type, person, connector, and outcome, search, and export.
  • Bring your own model key so Henry runs on your Anthropic or OpenAI account. See the Developer Guide.
Self-hosted deployment is available for enterprise customers. Contact sales.