What data does Context store?
Five classes: institutional context, run traces, customer content, session recordings, and telemetry. Sensitive Data is out of scope under the DPA.
The customer data a security review asks about falls into five classes: institutional context (procedures, examples, corrections), run traces, customer content (files and documents), session recordings, and telemetry. The DPA notes that the Services are not designed for Sensitive Data and customers agree not to submit it. The data handling page describes where each class lives per deployment model.
Written for it and security. Last reviewed 2026-09-15.
Related questions
Still need an answer?
Tell us what you were looking for and we reply within one business day.
Contact the team →Running a security review?
Documents, controls, and the request form live in the Trust Center.
Open the Trust Center →