---
title: Cloud extensions
sidebar:
  label: Overview
description: Connections that run in SuperAlign's backend — storage you own, and cloud AI products Surface reads from.
---

_[console.superalign.ai/extensions](https://console.superalign.ai/extensions) → **Cloud Extensions**_

A **cloud extension** runs in SuperAlign's backend, not on a laptop. It is the pair to an [endpoint extension](/surface/extensions/endpoint/overview), which runs on the laptop and decides what is collected in the first place.

The console splits them into two groups.

## Prompt stores

Where session data is kept. By default, recorded sessions are stored by SuperAlign for 30 days; a prompt store changes that.

| Extension | Role | What it means |
| --- | --- | --- |
| [Amazon S3](/surface/extensions/cloud/s3) | **Primary store** | Session data goes only to your bucket. The console reads it back from there. Retention is your bucket's lifecycle policy |
| [Splunk](/surface/extensions/cloud/splunk) | **Copy** | Every session message is also sent to your Splunk index. SuperAlign keeps its copy too |

## Cloud agents

Where sessions come from when there is no laptop involved. [Cloud sync](/surface/extensions/cloud/cloud-sync) connects to an AI product that runs in the cloud — Microsoft Copilot Studio, Cursor Cloud Agents — and pulls its agents and conversations into Surface on a schedule.

## How configuration works

Each extension has a **Configure** button and an on/off switch. Configure opens a window:

- **Required fields** at the top. **Advanced options** folded below; you rarely need them.
- **Secret fields** (keys, tokens). Once saved, a secret is never shown again. The field reads **Configured — leave blank to keep**. Click **Remove** to clear it.
- **Test connection** tries your values against the real service and tells you which step failed.
- **Save** keeps a draft. **Save & Enable** turns the extension on.

You cannot turn the switch on until every required field is filled and the test passes.

Credentials are encrypted, tied to your organization, and never returned by any screen or API.

## Turning one off

Click the switch. Surface stops sending data, or stops pulling it. Data already in your bucket, your index, or Surface stays there. Settings are kept, so you can turn it back on later.