Data Handling
Trix is designed with privacy as a core principle. Your data is encrypted at rest and in transit.
- AES-256 encryption at rest
- TLS 1.3 for all API connections
- Data isolated by API key and session
- No data sharing across accounts
Data Retention
Configure automatic data retention policies:
retention.ts
// Set TTL (time to live) on memories
await trix.memories.create({
content: 'Temporary session context',
spaceId: 'user_42',
metadata: { ttl: '24h' }
});
// Or set expiration date
await trix.memories.create({
content: 'Promotion ends soon',
metadata: { expiresAt: '2024-12-31T23:59:59Z' }
});Data Deletion
Users can request complete data deletion:
deletion.ts
await trix.memories.delete('mem_abc123');
const memories = await trix.memories.list({ spaceId: 'user_42' });
for (const mem of memories.data) {
await trix.memories.delete(mem.id);
}Deletion is permanent and cannot be undone. Deleted data is removed from backups within 30 days.
Compliance
Trix supports compliance with major privacy regulations:
- GDPR - Full support for right to access, rectification, and erasure
- CCPA - Consumer data rights and opt-out support
- SOC 2 - Pursuing Type II certification
- HIPAA - Planned for Enterprise plans