What we hold, and for how long.
Moneo sits on top of money movement, so the honest summary is that we keep a detailed record of transactions and a deliberately thin record of people.
What we collect
Account details for the humans who hold an API key (name, email, organisation), and the operational record of what your agents did: intents, verdicts, amounts, counterparties, and policy versions. We do not collect the contents of your agents' prompts or model responses.
Key material
Under TEE custody, private keys are generated inside an attested enclave and are not exportable, not by you and not by us. Under MPC custody we hold one share of a 2-of-3 quorum. Under bring-your-own-KMS we hold no key material at all.
Why we keep the ledger
The decision ledger is the product: it is what makes an agent's spending reconstructable and auditable. It is retained for the life of the account and exportable at any time in full.
Sharing
Execution requires sending order and settlement data to the venues and payment rails you direct funds through. Beyond that, and beyond what the law compels, we do not share your data. We do not sell it, and we do not train models on it.
Retention and deletion
Delete an account and its personal data is removed within 30 days. Financial records that regulation requires us to hold are retained for the statutory period and nothing longer.
Contact
Questions about any of this go to [email protected].