Security & Trust

How Meandr protects your data and keeps calls running

Each call's record is encrypted, kept for your plan's window and decrypted only when your team opens it.

Try for free Report a vulnerability

How it works

How Meandr handles customer data

  1. 01 Stored data

    Meandr keeps a record of each call and deletes it when your plan's window ends

    Each call's record, request body included, is stored encrypted.

    • Stored bodies are never scanned by DLP rules, pattern matching or PII detectors
    What each record holds

  2. 02 Location

    Your data is stored permanently in the United States

    Your agents' traffic may first land at a regional location near where it starts and stay there a few days, a week at most. Meandr then moves that data to the United States for permanent storage. A hosted MCP server runs in the region you choose, and the data it processes stays on that machine for its life.

    International Transfers in the Privacy Policy MCP hosting: choosing a server's region

  3. 03 Encryption

    Meandr encrypts your data on the wire and in storage

    Credentials, audit metadata and stored bodies are encrypted at rest.

    • Agents connect to Meandr over TLS 1.2 or newer with SNI required: a connection without SNI is refused at the handshake
    • Meandr's data stores are private and reached only over verified TLS
    Server credentials are sealed with AES-256-GCM and decrypted only in memory for a call, with mTLS and certificate checks to your servers

  4. 04 Staff access

    Meandr employees reach customer data only when their role needs it

    Meandr's platform runs on short-lived, role-based identities, not static keys.

    • A hosted server's logs are read only when you open them or Meandr investigates abuse
    • Your team's access is set by roles. Sign in with email or Google.
    Security measures in the Privacy Policy Roles and workspace access in detail

  5. 05 Availability

    Your agent's calls enter Meandr in the nearest healthy region

    Your agents connect to one address, and Meandr routes each call to the nearest region that is working. When one region is down, calls go to the next one, so your agents keep working.

    Recording is never skipped: when storage is busy, new calls wait, and if storage is down, Meandr stops serving rather than run calls it can't record.

    MCP Gateway: the one address your agents connect to

Compliance

SOC 2, GDPR transfers and service providers

Meandr is built to SOC 2 and preparing for the audit

The controls are in place, and certification is a planned next step after launch.

HIPAA is a design goal too — the custody model is being built to stand up to that scrutiny — but it's a direction, not a claim of compliance.

Data from the EU, UK and Switzerland reaches the US under Standard Contractual Clauses

Meandr, Inc. is a Delaware company and uses the European Commission's 2021 clauses, plus the UK and Swiss equivalents.

Disclosure

Report a vulnerability

Meandr welcomes coordinated disclosure. Send a description of the issue and the steps to reproduce it.

Email security@meandr.com

Questions about Meandr's security

What happens to our data when we delete the account?
Call records are deleted with the account, which you can request at privacy@meandr.com. Backups can keep some copies for a while, and server credentials for up to 35 days.
Does Meandr train AI models on our data?
Not without your explicit consent: neither your tool calls nor other customer data train Meandr's models or anyone else's.
Does Meandr see our card details?
No. Stripe takes payments as merchant of record, and Meandr receives only billing metadata such as your plan and subscription status.

Start with one server and one agent

Add a server, give an agent its key, and open the first call's record in the console.

Try for free

Questions? Email us