Trust Center

Security, privacy and standards you can verify.

How Edusodes protects learners and organizations, and the standards every episode is held to.

Compliance status

What is in place today, and what is not yet. We would rather tell you than let you assume.

Area	Status	Details
GDPR and UK GDPR	In place	Data subject rights honored within one month. Transfers covered by Standard Contractual Clauses.
CCPA / CPRA	In place	Personal information is not sold or shared for cross-context behavioral advertising.
Data processing agreement	In place	Published at edusodes.com/dpa. Countersigned copies from legal@edusodes.com.
Subprocessor list	In place	Published below.
SAML single sign-on	Early access	Part of Edusodes for Teams.
SOC 2 Type II	Not yet	No audit has been completed.
ISO 27001	Not yet	Not certified.
Choice of data region	Not yet	Customers cannot yet choose where their data is stored.

Third parties that process personal data on our behalf. We will update this list before adding a new one.

Subprocessor	Purpose	Data
Anthropic	AI models that write season outlines and episodes	Topics, goals and produced content. No names, emails or payment details.
Stripe	Payments, subscriptions and fraud prevention	Name, email, billing details
Hosting and infrastructure providers	Running the application, database and backups	All service data, stored on our behalf
Email provider	Sending and receiving service and support email	Name, email, message content

Protecting accounts and learning data is part of how the platform is built, not an add-on.

Passwords are hashed with bcrypt and never stored or logged in plain text.
Sessions use signed, HTTP-only, same-site cookies that scripts cannot read.
Every page, action and API request re-verifies the session and checks authorization on the server.
Quiz answer keys stay on the server until a learner submits, and grading happens server-side.
Payments are handled by Stripe. Edusodes never sees or stores card numbers.

We collect what is needed to run the service and nothing more.

One essential cookie keeps you signed in. There are no advertising or cross-site trackers.
Topics and goals are sent to our AI provider solely to produce your episodes.
Your learning data is never sold or shared for advertising.
You can request a copy or deletion of your data at any time.

Every episode is written to one editorial standard.

A fixed six-part structure: cold open, segments, worked example, takeaways, quiz and teaser.
Writing favors concrete mechanisms and numbers, and flags points that are contested or uncertain.
Requests that would be unsafe to teach are declined.
Content is educational, not professional advice. Verify high-stakes decisions with a qualified professional.

Learning should work for everyone.

The documents that govern the Service and your data.

Contact our team about security disclosures, privacy requests or data deletion.