Shared responsibility: what MITHUNAI and you control

MITHUNAI operates the hosted service: the infrastructure it runs on, the application and its security controls, isolation between organisations, backups, and the model and email providers it uses. Your organisation controls who has access, the API and widget keys it creates, which sources it connects and what their tokens can read, and which AI employee actions may run without a person. The table describes who does each job today; it is not a contractual allocation.

The hosted service

Area	Who	Today
Data centre and hardware	Hosting provider	Hetzner Cloud, Germany. See Subprocessors
Servers, operating system, network edge, TLS certificates	MITHUNAI	Only the TLS edge is reachable from the internet
Application code, security controls and vulnerability fixes	MITHUNAI	See Security
Isolation between organisations	MITHUNAI	See Security
Databases, file storage and backups	MITHUNAI	See Data handling
Monitoring and incident response	MITHUNAI	Not yet in place to the standard an enterprise review expects. See Data handling
Model provider and email provider accounts	MITHUNAI	They process data under their own terms
Allowing MITHUNAI support into your organisation	Your organisation	Off until an Owner or Administrator allows it. See Support access
People: invitations, roles, removal	Your organisation	See Members
API keys and widget keys: creating, scoping, revoking	Your organisation	See API keys
Which websites may load your widget	Your organisation	Within what the deployment allows. See Allowed origins
Which sources to connect, and what each saved token may read	Your organisation	What a token can read, your assistant can quote to anyone who can ask it
What your content contains	Your organisation	MITHUNAI redacts credentials it detects, and nothing more
Which AI employee actions wait for a person, and approving them	Your organisation	Some actions always wait and cannot be switched off. See Approval policy
Deleting conversations and sources	Your organisation	Console and API
Deleting the whole organisation, or exporting its data	MITHUNAI, on request	There is no self-service path yet
Tools you connect to AI employees (helpdesk, CRM, mailbox, identity provider)	Your organisation	Under your own contract with that vendor
Notices to the people who use your widget	Your organisation	—

Your own environment

MITHUNAI is not offered for your own cloud account or your own hardware today. See Deployment modes.

Data handling: what is stored, for how long, and how it is deleted.
Security questionnaire: short answers to the questions a security review asks.
Compliance: what MITHUNAI can and cannot claim.

Account and sign-in

Members

Organisation

Usage

Security, compliance and deployment

Shared responsibility: what MITHUNAI and you control

The hosted service

Your own environment

​The hosted service

​Your own environment

​Related pages

The hosted service

Your own environment

Related pages