Skip to main content

AI data privacy

Data privacy is our top priority.

Hex offers first-class support for data privacy through initiatives like Workspace AI features opt-out, Bring Your Own Key (BYOK), and geographic data residency.

Workspace AI features opt-out​

Hex admins can opt-out their entire workspace from AI features from the Settings > AI & agents settings page. Opting out of AI features at the AI & agents settings-level will disable AI features for all users.

Disable Hex Features

Third-party partner interactions​

  • Neither Hex nor our third-party model partners train models using data from Hex customers, which eliminates the risk of intellectual property leakage through passed context. This means a model won’t spit out your code to someone else. Our LLM providers have a zero retention policy, so your data is never stored.
  • Hex uses Customer Database Metadata like schemas and Customer Data project code and output content as model context. This means that any sensitive information in your projects, table or column names, or in your code, could be passed to a model for inference.
  • Hex's AI features are built on Hex’s secure data platform. These features are protected by secure practices and policies, are included in our third-party audits and bug bounty program, and safeguarded by the principle of least-privilege. You can learn more on our Data Privacy and Usage FAQ, Trust Center, and read our AI Product Specific Terms.

Bring Your Own Key (BYOK)​

info
  • Available on the Enterprise plan.
  • BYOK is supported for OpenAI, Anthropic, and Snowflake Cortex.
warning

When using your own API key, please note that Hex does not take responsibility for any cost incurred by the API calls. We encourage you to set up billing alerts for your API keys to monitor usage and costs.

When you enable Hex's AI features, Enterprise admins can specify their own API key for those AI features to use when making OpenAI, Anthropic, and Snowflake Cortex API calls. This allows all calls be be routed to the customer's preferred instance. By specifying your own API key, all embedding requests in our RAG system will use your API key.

To use an API key generated in OpenAI, Anthropic, or Snowflake Cortex, head to Settings > AI & agents and select the Add an API key button at the right side of the Model provider setting (Under Model settings).

BYOK Settings

Once a key has been added, you can add a new API key from the refresh button at the right side of the Model provider setting.

tip

BYOK is currently only available for OpenAI, Anthropic, and Snowflake Cortex. Please reach out to [email protected] if you're interested in using another provider.

On this page