Trust Centre
Your data.
What Command reads, where your records are kept, which providers handle them, and how long we keep them.
What it reads
Command reads only what you connect, and only with your permission. Running today means live on our first client’s account. We add each new client one at a time, with their permission, and confirm each source for them before we list it as running.
Your email. Gmail is read from one mailbox. Command reads the last three days of mail every ten minutes, leaving out promotions and social. Forwarded mail arrives, but Command can’t reply through it.
Running todayYour client and property records.
Running todayYour own notes.
Running todayOutlook. There is no direct connection yet.
Coming nextCouncil planning notices.
Coming nextCRM imports.
Coming next
Your diary (Google Calendar) and ASX announcements are not on either list yet. We’ll add each one once it’s confirmed for every client.
Where your records are kept
We will keep your records in Australia, on Microsoft Azure in Sydney. If that ever changes, we’ll tell you before it does.
In progress · target 30 Nov 2026
Our web app and its functions run in Sydney. Where our file storage is held is still being confirmed.
Who processes your data
Our providers · draft, being confirmed before launch · last updated 16 October 2026
| Provider | What it does | Client data? | Where it’s processed |
|---|---|---|---|
| Microsoft Azure | Command’s backend and the stored client records | Yes | Sydney (Azure Australia East) |
| Vercel | Hosts the web app and its functions, and stores files | Yes, for stored files | Functions in Sydney. File storage region still being confirmed. |
| OpenAI | Language models, voice, transcription and speech output | Yes: the text or voice sent for each task | United States |
| Anthropic | Language models | Yes: the text sent for each task | United States |
| Google (Gmail and Calendar) | Reads the mailbox and calendar you connect, with your consent | Yes | Google’s infrastructure |
This list isn’t complete yet. We’ll list every provider that handles client data before launch, and tell you before we add one.
How long we keep it, and deletion
While you use Command, we keep your records so it can work for you.
When you leave, we delete our copy of your records within 30 days. Planned
The deletion process will cover the database, file storage, backups and copies held by providers. It is still being built.
Still being confirmed: how long mail reads, notes and access history are kept, and how backups are purged. We’ll publish each period here once it’s set.
Exporting your records
Today you can download the original documents from the private library.
Client-safe exports for sharing are built, but not live yet. Neither of these is a full export of your records.
A full export of your records is Planned. We’ll publish its format and timing once it’s built and tested.
Leaving Command is covered on the leaving and escrow page.
Last reviewed 15 October 2026.