We follow GDPR requirements. You can access, export, or delete your data at any time. We document how we process your information and retain it only as long as needed.

All sensitive data is encrypted at rest and in transit using AES-256 encryption. Your information is protected whether it's stored in our database or being transmitted over the network.

We never use your data to train models. Our AI providers operate zero-retention policies with us, so conversation data is not stored.

We hold Cyber Essentials certification, the UK government-backed scheme that demonstrates our commitment to protecting against common cyber threats.

Learner and organisation records are held in secure UK data centres in the London region. Some specialist services operate in the EEA or US under standard contractual clauses.

We publish our privacy policy, data retention policy, terms of service, and record of processing activities. Everything is documented and publicly accessible.

All payments are processed through Stripe. We never store your card details on our servers - payment information is handled entirely by Stripe's PCI-compliant infrastructure.

Your data is automatically backed up every 24 hours with 7-day retention. Backups are stored across multiple geographic locations to ensure data availability and disaster recovery.

We monitor our systems 24/7 for security incidents and errors. Any suspicious activity or system issues are detected immediately so we can respond quickly.