FORG is designed to process metadata about AI usage, not prompt or completion content. This page documents our security posture, compliance certifications, data handling practices, and sub-processor list.
For SOC 2 report requests or compliance questionnaires, contact hello@forg.pro. For uptime commitments and support SLAs, see the SLA page.
FORG signal schema v3 is designed around the following metadata fields. The agent binary is open-source-auditable, and the signal emission code is in agent/internal/emit/.
| Field | Type | Description |
|---|---|---|
| session_id | string (UUID) | Ephemeral session identifier. Not linked to identity. |
| adapter | string | Workspace type used for the session |
| model | string | Model class or provider-reported identifier, normalized in user dashboards |
| ts | int64 (unix ms) | Event timestamp |
| tokens.input | int | Input token count |
| tokens.output | int | Output token count |
| tokens.cache_read | int | Tokens served from cache |
| tokens.cache_write | int | Tokens written to cache |
| cost_usd | float | Computed cost in USD |
| latency_ms.ttft | int | Time-to-first-token in ms |
| latency_ms.total | int | Total response latency in ms |
| dimensions.user | string (hashed) | User identifier (hashed, not plaintext email) |
| dimensions.project | string | Project / repo name |
| dimensions.team | string | Team identifier |
| dimensions.environment | string | Environment (e.g., 'dev', 'ci') |
What FORG never collects
| Plan | Signal data | Audit logs | Event logs |
|---|---|---|---|
| Developer ($9/mo) | 30 days | 1 year | 30 days |
| Professional ($14/mo) | 12 months | 2 years | 90 days |
| Team ($19/mo+) | 24 months | 2 years | 90 days |
| Business ($39/mo+) | Unlimited | 3 years | 1 year |
| Enterprise (custom) | Configurable | Configurable | Configurable |
FORG uses the following sub-processors. We notify customers of sub-processor changes with 30 days advance notice.
Cloudflare, Inc.
Edge compute (Workers), TLS termination, DDoS mitigation
US / GlobalSupabase, Inc.
PostgreSQL database and vector storage for product metadata
US (default), EU (residency option)Amazon Web Services
SES transactional email (license notifications, alerts)
US EastVercel, Inc.
Next.js site hosting (forg.pro marketing + dashboard)
US / Global