What stays in your account
- Everything runs inside your Snowflake account. The app never sends data to us, and we have no access to your account.
- Costs, scores and work types use metadata only: token counts, timings, tool names and status.
- Prompts, replies and tool details are read only when someone with
APP_ADMINopens a session's trace. For Cortex Code they are read from Snowflake's trace events at that moment, and the app keeps no copy. - Git reports include the repository, branch and commit, never the remote URL or any file content.
- Reports are accepted only from the Snowflake user who ran the session, so nobody can attach a branch to, or replace, someone else's session.
Who can see what
| Role | Can read |
|---|---|
APP_ADMIN | The dashboard, prompts and traces, and settings |
APP_VIEWER | Cost and session views in SQL, without prompts |
APP_REPORTER | Report a session's repository, branch and commit |
Compliance
Because the data never leaves your account, it sits under the same audited controls and agreements as the rest of your Snowflake data. There is no new vendor holding it to review.
Questions
Email support@aiagentledger.dev or see Support. Our privacy policy covers the website and the business relationship separately from the app's data handling.