Harness sits near your mailbox, your Xero and your customers, so the fair questions are about sends, other customers, where the data lives and how you leave. Five short answers below. The long version, with the reasoning, is on the trust page.
By default, nothing leaves Harness without a content-bound human approval, unless an owner or manager switched that stage to automatic. When you approve, the exact text you were shown is fingerprinted, and if one word changes before the send, the send is refused. The AI side of Harness has read and drafting tools; sending is not one of them.
No. Every question Harness asks its database carries your company on it, so a query that forgets whose data it is asking for does not return somebody else's, it returns nothing. Under that sits a second layer in the database itself, which holds the same rule at the row level. That layer binds when a flag is set on the server. It is set in production, and welding it on permanently is on our list.
Harness runs on one server we rent from Hetzner in Falkenstein, Germany, inside the EU. Heoka Partners Limited is a UK company registered in England and Wales, so UK data protection law applies and the Information Commissioner's Office is who you complain to. We hold invoices, quotes, contacts, what was chased and when, the drafts, the approvals and the facts your team has taught it. We do not hold your card details; the payment provider does.
An owner can disconnect the accounting system or the mailbox from the control room, and it takes effect there and then. Cancel and the billing stops. A full self-service export and a one-click wipe of the account are not built today: email connor@heoka.co.uk and we do it by hand and confirm when it is done.
You see the work every morning, and we watch for the night it did not happen. An empty queue on a morning when you know money is owed is the alarm. Each month there is one page of every send and who approved it, and every night the database is encrypted and copied to a second provider.
More on the privacy policy and the plain answers page.