diff --git a/app/en/operate/governance/tool-executions/page.mdx b/app/en/operate/governance/tool-executions/page.mdx
index 2443bc6d0..3eee8c8b9 100644
--- a/app/en/operate/governance/tool-executions/page.mdx
+++ b/app/en/operate/governance/tool-executions/page.mdx
@@ -111,6 +111,8 @@ Two consequences are worth knowing.
 
 The same history is available over the Arcade API. The base URL is `https://api.arcade.dev`, and requests authenticate with a bearer token.
 
+Reading history and changing the policy are two different services, so they answer on two different hosts. Execution history is served by the Engine at `https://api.arcade.dev`; the recording and retention settings below belong to your organization and are served by the control plane at `https://cloud.arcade.dev`, alongside the [audit log API](/operate/governance/audit-logs). The host and the path prefix differ together — `/v1/...` on the Engine, `/api/v1/...` on the control plane.
+
 List the runs that failed, 25 at a time:
 
 ```bash