> ## Documentation Index
> Fetch the complete documentation index at: https://docs.xorlab.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Pages under /latest/ document the current release. Paths that begin with a version number, for example /10.0/, are frozen snapshots of superseded releases kept for reference only — never present their instructions as current. If the reader's version is unknown, answer from /latest/ and say which version the answer describes.
> xorlab is deployed on-premises, hybrid, or as a cloud service, and integrates with either Microsoft 365 or on-premises mail infrastructure. Configuration steps often differ between these. State which deployment and integration mode an instruction applies to instead of presenting one as universal.
> Distinguish inline mode from monitoring mode when describing anything that acts on email. Monitoring mode observes a copy and cannot block or quarantine; inline mode routes mail through xorlab and can.
> Write the product name as lowercase 'xorlab'. Use the documented component names: xorlab Control Center (XCC), xorlab MTA, xorlab Sandbox (DANA), xorlab Natural Language Understanding (NLU). After the first mention, use the short forms XCC, MTA, Sandbox, and NLU. Do not use DANA as a standalone name for the Sandbox, but keep it where it is a literal string in configuration keys, container names, and hostnames.
> Do not invent configuration keys, rule parameters, list names, log properties, or API fields. If a value is not present in this documentation, say that it is not documented rather than guessing.

# Privacy

> How this documentation site handles your data.

This notice covers the xorlab documentation site. For xorlab AG's products, services
and main website, see the [xorlab privacy policy](https://www.xorlab.com/en/privacy).

## No cookies, no consent banner

This site sets no cookies, which is why you are not asked for cookie consent here.
Nothing is stored on your device for analytics. The only item stored is whether the AI
assistant panel is open, which belongs to a feature you switch on yourself. The cookie
banner on [www.xorlab.com](http://www.xorlab.com) applies to that site only.

## What we measure

We use Matomo to understand which pages are read and what people search for, so that
we can improve the documentation. For each page you open, Matomo records:

* the address and title of the page, and the page you came from
* search terms you enter in the documentation search
* your browser, operating system and language
* your approximate location, derived from a shortened IP address

Because no identifier is stored on your device, Matomo groups requests into a single
visit using a short-lived value derived from your shortened IP address and your
browser. We do not assign you a user ID, we do not track you across other websites,
and we do not use this data for advertising.

Search terms are recorded as they are typed, so please do not enter personal data into
the search box.

## AI assistant

This site offers an AI assistant. When you use it, your question and the answer are
sent to Mintlify, the platform this documentation runs on. Mintlify generates the
answer using an AI model and stores the conversation, and we can read those
conversations in Mintlify's dashboard in order to find gaps in the documentation.

This is separate from the measurement described above. We have switched Mintlify's own
analytics off, but conversations with the assistant are stored by Mintlify regardless.
Using the assistant is voluntary, and the rest of the documentation works without it.

Please do not enter personal data or confidential information into the assistant.

## Who processes the data

* **Mintlify** (United States) hosts this site, runs the AI assistant, and, together
  with its infrastructure providers, processes your IP address in order to deliver the
  pages.
* **Matomo Cloud**, operated by InnoCraft Ltd (New Zealand), stores the analytics data
  on servers in Germany.

## Legal basis and retention

The controller is xorlab AG. We process the data described above on the basis of our
legitimate interest in understanding how our documentation is used and improving it
(Art. 6(1)(f) GDPR).

Analytics data is deleted after 24 months.

## Your right to object

Because this processing is based on our legitimate interest, you have the right to
object to it at any time (Art. 21 GDPR). If your browser sends a "Do Not Track"
signal, no data is collected and no objection on your part is required. You can also
object by contacting us at the address given in the
[xorlab privacy policy](https://www.xorlab.com/en/privacy).

## Your other rights

You have the right to access your data and to have it corrected or erased, and the
right to have its processing restricted. You can also lodge a complaint with a data
protection supervisory authority. For how to exercise these rights, and for our
contact details, see the [xorlab privacy policy](https://www.xorlab.com/en/privacy).
