What exactly does the policy say?
The section of our privacy policy called "AI processing and model training" opens with that one sentence: Siela does not use customer data to train AI models.
It goes on to say that when a user requests an AI feature, Siela may send "the minimum relevant content" to an AI or transcription provider configured for that feature, so it can complete the requested task. The provider and setup can differ depending on how Siela is installed. The AI providers doing that work don't train on what Siela sends them either, so your data stays closed.
What's the difference between training and processing?
Training means using your data to build or improve an AI model. Processing means sending content to a model so it can do the job you asked for. The policy rules out the first and allows the second, and Siela's AI features depend on the second.
| What it means | What the policy says | |
|---|---|---|
| Training | Your data is used to train AI models | Neither Siela nor its AI providers do this with customer data |
| Processing | Content goes to a provider to complete a task you requested | Siela may send the minimum relevant content |
So when you ask an agent to do something, the content it needs does leave Siela. If you can't send a type of data to an outside AI provider at all, don't put it in Siela.
What information does this cover?
The policy doesn't give a one-line definition of "customer data". It does list the information Siela handles:
- Workspace and business information: CRM contacts, companies, pipeline records, customer notes, tasks and documents.
- Meetings, voice and communications: meeting audio captured after a user starts recording, transcripts, summaries, dictation, emails and calendar events.
- Account and contact information: names, email addresses, roles and support messages.
- Technical information: device and browser details, security events, diagnostics and logs.
The policy also says Siela does not sell customer personal information.
Can you get your data deleted?
Yes, you can ask, and the limits are worth knowing. Send a request through the contact form named in the policy. If you close your account or ask for deletion, eligible personal data is deleted or anonymised from active production systems within a reasonable period. Some data can be kept for security, fraud prevention, accounting, tax, disputes or other legal obligations.
Copies can stay in backups or with service providers until their normal cycles finish, and the policy gives no guaranteed timeframe for backups. Requests about workspace data may need to go through the organisation that controls the workspace.
What are the limits of this answer?
The policy is the commitment, and this post only explains it. It covers Siela's website and hosted workspace, and doesn't automatically govern a self-hosted setup controlled by another organisation. We don't have a SOC 2 report yet, as the security page says, so there is no SOC 2 audit behind these practices. If your company needs that first, we are probably too early for you today.
For a security review or a question about one feature, ask us through the contact form before you connect anything.
Frequently asked questions
Does Siela use my data to train AI?
No. Siela's privacy policy, last updated 30 October 2026, says Siela does not use customer data to train AI models. Content can still go to an AI or transcription provider when you use a feature, so that it can complete the task you requested. Those providers don't train on it either.
Does my data go to AI providers when I use Siela?
It can. When you request an AI feature, the policy says Siela may send the minimum relevant content to the AI or transcription provider configured for that feature, so it can complete the task, and the provider doesn't train on it. If a type of data can't go to an outside provider, keep it out of Siela.
Are meeting recordings used to train AI?
The policy lists meeting audio and transcripts among the information Siela handles, and says customer data isn't used to train AI models. Recording only starts when a user starts it. Getting any consent the law requires from people on the call is the responsibility of the user and their organisation.
Has an auditor checked Siela's data practices?
Not through SOC 2: Siela doesn't have a SOC 2 report yet. The privacy policy and security page describe what Siela commits to and how it works. If your company needs a SOC 2 report before buying, Siela is probably too early for you today.