Back to Help Center

Security & Privacy

We only describe security and privacy practices we can point to in the product.

What we can state today

  • The site is served over HTTPS with HTTP Strict Transport Security (HSTS), so data is encrypted in transit.
  • Participant records and notes require sign-in and are scoped to your account. Passwords are stored hashed.
  • Provider Shield is hosted with third-party cloud providers and uses third-party payment, analytics and AI services. Text you submit for review may be processed by an AI service.

What we do not currently state

We do not currently publish statements about the location of data storage or AI processing, retention periods, or encryption at rest. If these matter to your organisation, contact us before you sign up.

Your responsibilities

You remain responsible for your own privacy and record-keeping obligations. Enter only the participant information you need. See the Privacy Policy for how personal information is handled.