Privacy
The short version: Nerve is a managed service. To run and govern your agents, we store the operational data that takes — secured, isolated per tenant, and less of your surface than the tools you already trust. You can keep more to yourself, or run Nerve on-premises.
1. Who we are
Dubhlán, LLC (“Dubhlán”, “we”, “us”) is based in Garner, North Carolina, USA, and provides the Nerve platform. This policy covers dubhlan.com, the early-access process, and the Nerve managed service. Questions: [email protected].
2. What Nerve stores, and why
Nerve is hosted by Dubhlán. To orchestrate your agents, keep them inside their guardrails, and produce the dashboards you rely on, the service holds:
- Account data — the names, work emails and organisation details of the people who use your tenant.
- Connection data — how Nerve reaches the systems you connect it to (repositories, clusters, integrations), and the credentials for them, encrypted.
- Agent communications — the messages, tasks, tool calls and results your agents generate. These can include source code and other intellectual property, because that's the work the agents are doing.
- Operational records — tasks, deployments, approvals, cost and token usage, and telemetry, so the audit trail and metrics are real.
We hold this to deliver and secure the service, and for no other purpose. We do not sell it, we do not use it to train models, and we do not share it beyond the subprocessors below.
What we do not do: we do not stand up a database for your applications — your apps keep their own data in your own systems. Nerve stores only its own orchestration data, in our managed store, isolated per tenant.
3. In plain terms
This is the same trust you already extend to GitHub, your CI system, and your cloud provider — all of which hold your code and more. Nerve touches less of your surface than any of them, and it exists to make sure the access you've given your agents doesn't get misused. If a service holding agent metadata is a line you won't cross, the on-premises option below keeps everything in your infrastructure.
4. How it's protected
Operational data is isolated per tenant and encrypted at rest. Agent credentials are default-deny — an agent reads a secret only where you've explicitly granted it. Agent output is scanned for leaked credentials and interrupted mid-stream if one appears. Every administrative action is audited. See the security page for the detail.
5. What you can keep to yourself
Point inference at your own model endpoints (a self-hosted vLLM or Ollama, or your own hardware), and your prompts and completions run against your models, not through ours. That's your choice, per agent and per project.
6. Legal basis & retention
- Legal basis (GDPR): performance of our contract with you (running the service), and our legitimate interest in securing it and preventing misuse.
- Retention: operational data is kept while your tenant is active and for a limited window afterwards; you can configure shorter retention, delete specific records, and export or delete your data on termination. Ask us and we'll confirm the current windows for your plan.
7. Subprocessors
We rely on a small set of providers to run the service — cloud hosting and database infrastructure, and the email/DNS services behind this website — each acting as a processor under contract. Where you choose a third-party model provider (for example Anthropic) for inference, your prompts are sent to that provider to fulfil the request; route to your own models to avoid that. We'll provide the current subprocessor list on request.
8. On-premises
Prefer everything inside your own walls? Nerve is available as an on-premises deployment — you run it in your infrastructure and the operational data stays there. It's an enterprise engagement with a significant cost. Ask [email protected].
9. The website
When you email us or apply for early access, we receive what you choose to write — typically your name, work email, company and what you're building. Our host (Cloudflare) processes standard request data such as IP and user agent to serve and protect the site. We set no non-essential cookies, run no advertising or cross-site tracking, and don't sell data.
10. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete personal data we hold about you, and to object to certain processing. Email [email protected] and we'll verify your request and respond. For data inside a tenant, the tenant's administrator is typically the controller and we act on their instructions.
11. Changes
If we change this policy we'll update the date above and flag material changes to active customers.