> For the complete documentation index, see [llms.txt](https://docs.toucanai.cloud/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.toucanai.cloud/govern/security-model.md).

# Security model

{% hint style="info" %}
**Target Audience**: Developers, security reviewers, and technical decision-makers integrating Toucan AI.
{% endhint %}

### TL;DR

Toucan AI protects data with layered controls: short-lived embed tokens, organization isolation, row-level security on queries, encrypted database credentials, and clear boundaries between **platform data** and **your connected data**.

***

### What this section covers

* [Data access boundaries](/govern/security-model/data-access-boundaries.md) — who can access what
* [Data storage & retention](/govern/security-model/data-storage-and-retention.md) — what Toucan stores, query data flow, caching
* [PII & personal data](/govern/security-model/pii-and-personal-data.md) — where personal data can appear and how to minimize it
* [Secrets & encryption](/govern/security-model/secrets-and-encryption.md) — credentials and tokens
* [Token security](/govern/security-model/token-security.md) — embed authentication
* [API security](https://github.com/ToucanToco/toucan-ai/blob/main/docs/govern/security-model/api-security.md) — access controls for APIs
* [AI assistant data handling](/govern/security-model/ai-assistant-data-handling.md) — conversations and AI workflows
* [Third-party subprocessors](/govern/security-model/third-party-subprocessors.md) — external providers that may process data

For embed-specific responsibilities, see also [Security boundaries](/embed/embedding-overview/security-boundaries.md).