Security & data privacy

Trust is foundational to a learning platform. Here's how LearnVault protects your data.

Strict tenant isolation

Every organisation is a separate tenant. Data is scoped by tenant on every request and enforced server-side, so no organisation can ever access another's records, members, or sessions.

You own your recordings

Session recordings are stored in your organisation's own Google Drive folder, under your control, not locked inside our database. You can revoke access at any time.

Private subdomains

Each organisation operates on its own private subdomain. These portals are never indexed by search engines and exist only for authenticated users.

Tenant-scoped AI

The AI assistant only ever answers from a member's own transcripts and materials. Data is never shared between organisations or used to train shared models.

Encrypted in transit

All traffic is served over HTTPS with automatically managed TLS certificates. Authentication uses short-lived, signed tokens.

Read our privacy policy for full details on data handling.