Security and data

Your data stays yours

What your security and procurement teams usually ask, answered plainly. The full terms are in our privacy policy.

Who owns the data?
The institution or company does. We process it only to run the service and on your instructions. We don't sell it or use it for advertising.
Where is it stored?
On Google Cloud in the United States, for every product.
How is it protected?
Data is encrypted on the way in and while it sits. Access is kept to the minimum anyone needs, and each organization's data is walled off from the rest.
What goes to AI providers?
We don't send names, email addresses, or other information that identifies participants or instructors to AI providers. Where a simulation uses AI, it is off unless you switch it on.
How long do you keep it?
As long as we need it to run the service and meet legal and contractual obligations. Then we delete or de-identify it.
How do people sign in?
Directly, or through your learning platform over LTI (Learning Tools Interoperability), so they use the account they already have.
Can you complete our security review?
Yes. Send us your security questionnaire and we will answer it with your team.