FAQ

Why do I need to bring my own Anthropic key?

Three reasons: honest pricing (we charge for the platform, not for AI), your data goes through your contract with Anthropic, and you don't get throttled by other workspaces' usage. Full detail in BYO Anthropic key.

Is ProductOS self-hostable?

Not currently. The platform depends on Supabase + Vercel + Anthropic; a fully isolated install isn't on the near-term roadmap.

Can I export everything?

Yes. GET /api/v1/{entity}/export?format=csv (or format=json) returns the full table for any entity. Settings → Import / Export → Export all data downloads every entity as one Excel workbook in the same layout as the import template, so it can be re-imported. Exports are generated on demand; there is no scheduled backup.

Does ProductOS train on my data?

No. Workspace data is not used to train models. Once you save your Anthropic API key, it controls every AI call you make, even where ProductOS also provides a hosted key; Anthropic's data-retention policy applies to those calls (configurable in your Anthropic account). ProductOS itself runs no training pipeline.

How is data isolated between workspaces?

At the database. Row-Level Security policies on every table check the caller's workspace membership and role on every read and write, and API routes re-check the role on top. API tokens are bound to one workspace at issue time. There is no cross-workspace query path in the API surface.

What's the limit on workspace size?

No hard limit. We've tested workspaces up to ~250,000 feedback rows and ~10,000 features. Lists past these sizes get visibly slower; see Pagination for the workaround.

Can I have multiple workspaces?

Yes, being rolled out. One account can belong to several workspaces, with its own role in each, and switch between them from the bottom of the sidebar (or G then W). Each workspace keeps its own data, integrations and API tokens, and its pages live at its own address, productos.ca/<workspace>/…, so two browser tabs can work in two workspaces at once. Until the switcher reaches your account, accepting an invitation to a second workspace while signed in tells you that you already belong to one.

Is the API stable?

/api/v1/* is the stable surface. We commit to backwards-compatibility within v1, no removed fields, no enum value removals, no breaking schema changes. New fields and new enum values are additive. When we need to break, we ship /api/v2/* and run both for at least 12 months. The OpenAPI document served at /api/v1/openapi is the contract.

What about /api/ai/* and /api/integrations/*?

Not v1. These are unstable surfaces that can change between releases. Watch the changelog if you depend on them.

How are my API tokens secured?

Hashed with SHA-256 (never stored in plaintext); only a short display prefix (pos_live_ plus the first four characters) is kept. The full key is shown exactly once at creation; lost the key → revoke and re-issue. Each token carries a coarse read | write | admin scope set plus a workspace role fixed at issuance (defaults to commenter, capped at the issuer's own role). Issuing and revoking tokens takes an admin or owner. If the issuer is later demoted below the token's role, the token is revoked automatically.

Can I revoke a token without breaking running scripts?

Yes: issue a fresh token at the same role, update your dependents, then revoke the old one. There's no rotation grace period (a revoked token errors immediately on the next call), so do this during a planned window.

What happens if my Anthropic key runs out of credit mid-call?

The AI call fails and the error Anthropic returned (credit exhausted, invalid key, rate limit) is surfaced in the toast or the /api/ai/* route's error body. Top up your Anthropic account, retry. The platform's non-AI features (entities, integrations, exports) keep working normally.

How do I delete my account?

There is no self-serve account deletion yet. Email support@productos.ca from the address on the account and we'll handle it.

If you're the workspace owner, transfer ownership first (Settings → Members & Roles: change a member's role to Owner) so the workspace keeps a live owner, or ask for the workspace's data to go with the account.

What's the deal with sequence IDs (FEAT-000123)?

Stable, human-friendly identifiers separate from the UUID primary key. They never repeat, even if a feature is hard-deleted, its sequence ID stays gone forever. Use these in PR titles, Slack messages, anywhere humans will read them. Use the UUID in API calls that need to outlive a sequence number (rare). Prefixes can be renamed per workspace under Settings → Entity Naming; the API and MCP emit the renamed form and accept both.

Why is the URL productos.ca not productos.com?

.com was taken. We're in Vancouver. .ca it is.

Next

• Getting started: first 30 minutes if you haven't already.
• Troubleshooting: fixes for specific problems.