What happens to your business data.
Six questions, answered from the system that is actually running. Where a claim can be verified from outside, this page tells you how to verify it. Where we cannot answer something yet, you will not find a reassuring sentence standing in for the answer — you will find nothing, which is the honest version.
Where is my data held?
IntelligentWolf runs on servers in Germany, operated by Hetzner Online GmbH — inside the EU.
Your browser reaches that server directly. There is no content delivery network or caching proxy in front of it keeping a copy of what you send.
Check it yourself
dig +short intelligentwolf.com → 116.202.127.6 — an address registered to AS24940, Hetzner Online GmbH.
Who else touches it?
Two services are involved whatever you do. Anthropic runs the AI model behind your staff, so what you ask them — and the context from your floor they need in order to answer — goes to Anthropic’s API. Stripe processes subscription payments.
Everything else is a connection you make yourself. Xero, Google, Microsoft, HMRC, QuickBooks, Sage, WhatsApp and the social networks are each switched off until you sign in to them and grant access. Until you do that, nothing about your business is sent to any of them.
Do you train AI on my business?
We do not train AI models. There is no model of ours to train — no training code, no fine-tuning, no stored model weights anywhere in the product.
What your staff know comes from the instructions we write for them and the context from your own floor, assembled fresh for each request and not retained as anything a model learns from.
Can I get my data out?
Yes — a single JSON file, downloaded from Settings. It carries your account record, tasks, goals, contacts, invoices, quotes, projects, achievements, notifications, your staff, and the organisations you belong to.
The export asks for your password again rather than accepting the session you are already signed in with, so someone who finds an unlocked laptop cannot walk off with the file.
What happens when I delete my account?
Your personal details go — email, name, company, profile picture — along with your password. Any live subscription is cancelled, and you are removed from every organisation you belonged to.
It does not delete your organisation’s business records. Other people on your floor may still be working from the same invoices and contacts, so those stay with the organisation rather than leaving with whoever closed their account first.
Who can get into my account?
Passwords are stored as bcrypt hashes. Nobody here can read yours.
Signing in issues a random 256-bit token, and we store only a SHA-256 hash of it — so a copy of our database does not let anyone sign in as you.
Signing in, exporting and deleting are each rate-limited per address and per account, so a machine cannot grind through password guesses.
What have you actually built to keep it safe?
Anything arriving from an outside service is signature-checked before we act on it. Messages from Xero, Stripe, Twilio and WhatsApp are each verified with a keyed hash, compared in constant time — so a wrong signature cannot be narrowed down one byte at a time by measuring how long the check takes.
Xero verification accepts a set of signing keys rather than a single one. That is the part that lets a signing key be replaced without dropping the messages already in flight, and it is not something you build to make an integration demo well.
The site sends a strict set of response headers on every request: HTTP Strict Transport Security for a year including subdomains, no MIME-type sniffing, no framing by other sites, referrers trimmed when leaving the origin, and camera, microphone, location and payment access restricted to this site alone.
Check it yourself
curl -I https://intelligentwolf.com — the headers are in the response.
On this site
This site uses Google Analytics, and it loads only after you accept it. Decline and it never loads. Full detail is in our privacy & cookies notice.
Every statement on this page describes something in the running system rather than an intention. If a question you need answered is not here, it is because we have not finished establishing the answer — ask us and we will tell you which it is.