Security & privacy
Security, privacy, and how it all works.
Discover runs on the same certified platform as Unity Platform. Your participants' words and your findings are handled to enterprise standard. The important details are below, then FAQs, then links to every policy.
Certified
- ISO 27001 certified.
- SOC 2 Type II.
- Independently audited, with security documentation available for procurement.
- Built on the same ISMS as Unity Platform, CREST-tested.
Consent-first by design
- Every participant opts in before an interview runs.
- They can always choose to book time with the human instead.
- Nothing is recorded without a clear yes.
- Notifications and consent copy are configurable to your regional and legal requirements.
No training on your data
Your interviews and findings are never used to train shared or third-party AI models.
Where your data lives
Interviews, transcripts and AI-generated outputs are stored in encrypted infrastructure, encrypted in transit and at rest, backed up regularly. Enterprise data residency options are available.
You control it
- You control who sees a study.
- You can delete an interview, a study, or request deletion of all your data at any time.
- Agent queries against your data are logged with user, time and query.
We're here if you need us
More questions? Contact our team.
Frequently asked
Data security
How is customer data secured?
Encrypted in transit and at rest, on independently audited infrastructure certified to ISO 27001 and SOC 2 Type II. Access is role-based and agent queries are logged.
Do you conduct penetration testing?
Yes. Discover runs on the same platform as Unity Platform, which is CREST-accredited penetration tested, with remediation tracked to closure.
What certifications do you hold?
ISO 27001 and SOC 2 Type II. Security documentation is available for procurement on request.
How do you manage vulnerabilities?
Continuous dependency and code scanning, plus periodic third-party penetration testing, with findings tracked in a corrective action register.
Do you support SSO / SAML?
SSO / SAML is on the roadmap for organisation-wide sign-on. Role-based access and org admin are available today.
Can we bring our own model or private deployment?
Private and bring-your-own-model options are on the roadmap for Enterprise. Talk to sales about your requirements.
Data storage & processing
What happens to my data if I delete my account?
You can request deletion of all your data at any time, and it is removed from active systems and backups per our retention policy.
Can I request a copy of all my data?
Yes. Contact us and we will provide an export of your interviews and outputs.
What are your retention policies?
Interviews and outputs are retained to your configured policy. Enterprise plans can set custom retention windows.
Where is data processed and stored?
On encrypted infrastructure, with enterprise data residency options available on request.
How is participant consent recorded?
Every participant opts in before an interview runs, and that consent is recorded with the interview.