Both our Insights proprietary system and AI inference partners are built from the ground up for data security and are fully GDPR compliant.
We built Insights with one core principle, we should never hold your data unless absolutely necessary.
We do not store your ConnectWise ticket data
We do not store AI prompts or AI responses
We do not train AI on your data
All data is encrypted in transit
Insights runs in UK datacentres
AI requests are one-off, isolated, and discarded
If you are security-conscious, you are in the right place.
Only the minimum needed to run the platform:
Your company details for account setup
Encrypted API keys (ConnectWise, IT Glue if used)
User login details (email, member ID, securely hashed passwords)
Feature usage analytics
Your personal layout and preference settings
Draft job notes or task lists, only until they are pushed back into ConnectWise
Common board statuses (“In progress”, “Closed” etc.), so as not to have to hit the API for them every time.
That is it.
Insights never stores:
Your ConnectWise ticket notes or time entries
Any client or customer data from tickets
IT Glue documentation or passwords
Any AI prompts or AI-generated responses
Once a task is complete, the data is gone from Insights.
Insights is designed around data minimisation.
When you use a feature:
The required data is pulled from ConnectWise
It is processed securely in memory
Sensitive content like email signatures is stripped out
The result is returned to you
The data is immediately discarded
Nothing is pooled, cached, or kept.
Only a small number of Insights features use AI.
When they do:
Only the specific information needed for that action is sent
Each request is isolated and one-off
Requests are never reused or linked
Data is deleted immediately after the response is generated
We do not use AI providers that retain or train on customer data.
Insights uses specialist AI inference providers chosen specifically for zero data retention.
Your data is never used for model training
No prompts or responses are stored
Only anonymous usage metadata is retained (timestamps and token counts)
We have Data Processing Agreements in place with all partners.
All data is encrypted in transit
Insights runs in secure UK datacentres
AI processing occurs in the USA under recognised legal safeguards
GDPR and UK GDPR compliance is maintained using Standard Contractual Clauses
For US customers, this means your data is handled under stronger privacy standards than typical US requirements.
If you leave, all stored account data is fully removed from our systems.
No residue, no archives, no surprises.
Security is not a feature add-on for us, it is foundational.
As AI and technology evolve, our security practices evolve with them. Any meaningful changes will always be communicated clearly.
If you have questions, we are happy to answer them directly at hello@insightmsp.com.
AI is an evolving field and we are committed to keeping on top of regulations as they change.