# Data, secrets and retention

> Explain where company data goes and what deletion means.

Source: https://usefiretower.com/docs/data

## Where information lives

-   **Control plane:** shared state, conversation records and encrypted credentials.
-   **Worker machines:** repository mirrors, workspace files, local event logs and running agents.
-   **Agent providers:** requests sent by the coding agent under the account you selected.
-   **Git hosts:** repository operations and changes you push.

Self-hosting controls where Firetower runs. It does not make a cloud model local. Review each agent provider’s data policy and the tools available to that agent.

## Protect credentials

Keep the root key separate from database backups. Limit access to the control-plane host and to worker SSH accounts. A worker executes with its account’s filesystem and network permissions.

Use [resource sharing](https://usefiretower.com/docs/sharing) to control who can use an account. Rotate or revoke credentials at their provider when access must end.

## Review telemetry

Open Settings in the administration site to review Telemetry. The panel shows its current state and the payload preview. An administrator can turn it on or off for the organization.

## Export before cleanup

Save needed files and ship changes before ending a workspace. Workspace teardown can remove its working directory and conversation records. Do not rely on workspace history as a long-term archive.

See [Back up Firetower](https://usefiretower.com/docs/backups) to protect installation data.