- Where your data lives
- Who can see what
- Interviews, transcripts and AI
- Accounts, payments and your data over time
tri12.ai interviews people about their own organisation, so the information we hold is sensitive by nature. Below is what we do to protect it today, in plain terms. If you need more detail for a security review, email legal@tri12.ai.
Where your data lives
- Hosted in the UK. The platform and its database run on Amazon Web Services in London.
- Encrypted in transit. Every connection to tri12.ai uses HTTPS (TLS 1.3); plain HTTP is redirected to HTTPS.
- Credentials for connected tools are encrypted in our database, so a copy of the database alone does not reveal them.
- Processing outside the UK. Some of our AI and voice providers process data outside the UK while an interview or analysis runs. Where they do, the transfer is covered by UK data transfer safeguards.
Who can see what
Findings are reported for groups, never for individuals, and no result is shown for any group of fewer than 5 people.
| Who | What they can see |
|---|---|
| The person interviewed | Their own transcript, any time, and their own personal report if the organisation turns those on. No one else can open either. |
| The organisation's admins and managers | Group-level findings, themes and recommendations. Quotes are paraphrased to remove identifying detail and shown under a pseudonym. They cannot open anyone's transcript. |
| The tri12.ai team | Transcripts and notes, only where needed to run and support the service and to check the analysis is fair and accurate. We never share them with your organisation. |
- Each person gets their own interview link, made from a long random code that cannot be guessed. Links stop working once the interview window closes.
- Each organisation's data is kept to that organisation, and every account has a role (admin, manager or respondent) that limits what it can see.
- One exception, for safety. If something said in an interview suggests a risk to someone's safety or another serious matter, a short summary goes to the organisation's named safeguarding contacts and to our team at the same time. The person is named only if someone may come to harm soon, or if they agree. How this works.
Interviews, transcripts and AI
- We keep the written transcript, not a recording. Voice is processed in real time to run the conversation; no audio is stored on tri12.ai.
- Your data does not train AI models. We do not use customer data to train or improve general-purpose AI models, and our AI providers process it under API terms that exclude training.
- The providers we use, each only for its part of the service:
| Provider | What for |
|---|---|
| Amazon Web Services (London) | Hosting, database and email delivery |
| Anthropic | The AI interviewer and the analysis of interviews |
| Search over transcripts and documents (Gemini embeddings) | |
| ElevenLabs | Voice for spoken interviews |
| Stripe | Card payments and invoices |
Accounts, payments and your data over time
- Passwords are never stored. We keep only a salted one-way hash (bcrypt). Password reset links expire after two days, and signing out ends any “keep me signed in” session.
- Card details never reach our systems. Payments go through Stripe's secure checkout and customer pages; Stripe is certified to PCI DSS Level 1.
- Messages from our suppliers are verified. Payment, voice and email notifications to the platform are signed, and we reject any we cannot verify.
- Your data is kept while you are a customer, and deleted when you ask. If a paid plan ends, your data stays on the free plan rather than being removed. Ask us to close your account and we delete your data within 90 days, except where the law requires us to keep it.
- If something goes wrong, we tell you. We will notify you within 48 hours of becoming aware of a breach affecting your data.
For how interviews feel from the respondent's side, see Confidentiality; for the contractual commitments, see the Terms and conditions.