FAQ

How do I get an account?

Signup is currently private beta. Request access at /request-access. We review the request and email an invite. Self-serve public signup is not open.

Where does my data live?

Production runs entirely in AWS eu-central-1 (Frankfurt). Indexed chunks live in OpenSearch Serverless. Connector credentials are envelope-encrypted with AWS KMS and stored in RDS Postgres (connector_credentials) — not in Secrets Manager. Audit log and control-plane metadata also live in Postgres. We do not replicate customer documents outside the EU. Outbound calls to Stripe (EU) and WorkOS (US) carry billing / authentication metadata, never document contents.

Do you train on my content?

No. Embeddings use AWS Bedrock Titan with logging disabled; short document summaries (when the knowledge-graph overlay is on) use Bedrock Claude Haiku on the same account. We don't run model training or fine-tuning on customer content.

Which models do you call?

OrgMCP calls Bedrock for embeddings (Titan Embed v2) and, when summaries are enabled, Haiku for short document abstracts. The assistant on the other end of the MCP socket is whatever you choose — Claude, GPT, Cursor's model, a local model. OrgMCP does not proxy your chat completions.

Can I bring my own OpenSearch / vector DB?

Not on the multi-tenant SaaS. Enterprise customers can opt into silo-mode (a dedicated AWS account in your region of choice with your own AOSS collection) — talk to sales.

Do you support SSO?

Sign-in is WorkOS AuthKit (Google, Microsoft, GitHub, passkeys) on every plan. Company SAML / OIDC (Okta, Entra) is a Business feature. SCIM directory sync is Enterprise. Setup takes ~30 minutes once we receive your IdP metadata.

How do you handle deletion?

Workspace owners can delete the workspace from Settings → Danger zone. The workspace stops serving API and MCP traffic immediately. After a 30-day grace period we hard-delete Postgres rows (memberships, connectors, encrypted credentials, audit log) via ON DELETE CASCADE. Stripe Customer records are kept as the financial system of record. You can cancel deletion during the grace window.

What if I hit my plan limit mid-conversation?

The MCP request returns 429 with a clear message; the AI client usually surfaces it as "rate limit reached, try again in N seconds". Plan MCP ceilings are Free 30, Team 120, Business 600, Enterprise 6 000 requests / minute. Upgrading takes effect on the next request.

Where do I report a security issue?

security@orgmcp.io. See also /.well-known/security.txt. We aim for an initial reply within 24 h.

Status page?

status.orgmcp.io. Powered by an external provider so it stays up when we're down.