Data Privacy and Security

Understand how Pipeline Intelligence handles your data.

Opt-in

Pipeline Intelligence AI features are off by default. Nothing is sent for processing until an organization admin explicitly enables them.

What is sent for processing

When AI features are enabled, only the minimal input data needed to generate a response is sent for processing. This may include:

• Your configuration and resources
• Telemetry samples
• Agent information
• Content snippets

Your inputs and outputs are never used to train or fine-tune AI models.

Sensitive value masking

Sensitive configuration and resource values, such as credentials and API keys, are masked with a (sensitive) placeholder before anything is sent to the model.

Automatic PII redaction

Although we redact Personally Identifiable Information (PII), we still recommend exercising caution when including personal or confidential information in your prompts.

Before any telemetry is sent to the AI model, Pipeline Intelligence detects and redacts common categories of PII, replacing each match with a [REDACTED] placeholder. Detection uses the same patterns as the Redact Sensitive Data processor.

The following categories are redacted:

• Email addresses
• IPv4 addresses
• IPv6 addresses
• MAC addresses
• International Bank Account Numbers (IBAN)
• Credit card numbers
• Social Security Numbers (SSN)
• US phone numbers
• International phone numbers

Data retention

Data sent to the AI model is used during transmission to generate a response and is not retained. Two features keep data for a limited time:

• Bindplane Agent (beta) saves your chat history so you can return to past conversations. Chats are stored per user, per project, and are visible only to the user who created them. Saved chats are deleted automatically after 14 days. When your project has a data encryption key configured, Bindplane Agent chat titles and messages are encrypted using the same encryption technique used for your other Bindplane secrets.
• Global Pipeline Intelligence collects small data snapshots from across your pipelines in order to generate recommendations. Snapshots are deleted as soon as they are no longer needed, and no later than 10 days.

Third-party AI providers

Pipeline Intelligence sends requests to third-party AI providers to generate responses. The provider used for each feature is listed in the AI Features table on the Overview page. For details on a provider's data handling practices, refer to its privacy documentation. For more information on how Bindplane handles your data, see our Privacy Policy, and our EULA.