Hands-on AI training
Security and data at Symerse, in plain facts for your IT team.
What we store, where it is processed, who can see it, and what we do not claim.
The facts, one line each.
| Topic | Fact |
|---|---|
| Where data is stored | In the EU, in Ireland. |
| AI provider | Anthropic (Claude). |
| Speech to text | When a trainee records a spoken walk-around, the audio goes from our servers to AssemblyAI's EU endpoint for transcription. |
| Where AI processing happens | In the US, by Anthropic, under a data processing agreement and standard contractual clauses. EU-only processing is not configured. |
| Model keys | Held on our servers. Every AI call goes through a server-side proxy, so keys never reach an iPad or a browser. |
| Training on your data | Anthropic does not train on API inputs or outputs by default (feedback excepted). We do not use your data to train AI models. |
| Access control | Every account is scoped to its organisation, enforced in the database and covered by an automated test suite. Roles: trainee, trainer and organisation admin. |
| Who can see what | A trainee sees only their own table. A trainer sees the classes in their organisation: tables, conversations, decisions and marks. An organisation admin also sees its AI spend and manages its members. Our own staff can see every organisation for support. |
| Retention and deletion | Conversation text is deleted a set time after the class ends: 24 months by default, adjustable per organisation from 1 to 120 months. Error reports are kept 90 days and usage analytics 13 months. Trainees and trainers can delete their own account in the app, and anyone can ask us by email. |
| What is logged | Append-only records in our EU database of every AI call charged to an organisation (model, tokens, cost), every marking run and classroom actions such as unlocking an exercise. No one can edit them from an app. Staff sign-ins and data reads are not recorded yet. |
| Certifications | None yet. Symerse is not certified to ISO 27001, SOC 2 or any other standard, and no course certifies EU AI Act compliance. |
For a session at your site.
Devices connect outbound only, over HTTPS. They never contact an AI provider directly. Send your IT team the network sheet two weeks before a session.
Questions IT and quality teams ask.
What happens to what our people type into the exercises?
It is stored in the EU, in Ireland. AI requests go through our server-side proxy to Anthropic, which processes them in the US under a data processing agreement and standard contractual clauses. Anthropic does not use API inputs or outputs for training by default.
Bring one cohort. See the record they leave with.
A 30-minute call with the engineers who built it. No slides.