Events are metadata only
Every LLM call is recorded as an event containing hashes, token counts, costs, model names, and timing. Events never contain prompt or response text, and never contain PII. Content is stripped at the source, in the SDK, before anything is exported.Your provider keys stay yours
Your LLM-provider API keys (OpenAI, Anthropic, and so on) live in your own environment or secrets manager. Visceral never stores them.Isolation and encryption
Per-workspace isolation
Customer data is isolated per workspace at the database level, so one
workspace can never read another’s.
Encrypted at rest
Any payloads Visceral caches are encrypted at rest with a per-workspace key
derived from a server-only master key.
If you ever need Visceral to see less, the safe default is already the one in
place: metadata, hashed, isolated, encrypted.