Trust

Security & responsible AI

Last updated: July 2026

We take a straightforward, honest approach to security and to how we use AI. This page explains what actually happens to your data. For the full detail, see our Privacy Policy.

Where your data lives

• EU data residency. Your account database and file storage are hosted in the EU (Supabase, Ireland region), which the UK recognises as providing an adequate level of protection.
• Encryption. Data is encrypted in transit (HTTPS/TLS) and at rest, using our infrastructure providers' standard encryption.
• Payments. Card payments are handled by Stripe. We never see or store your card details, only a record of the transaction.
• Passwords. Sign-in is handled by our authentication provider (Supabase). We never see or store your password.

How we use AI, and what we never do with your data

• No training on your data. Text you submit to the in-lesson tools is sent to our AI provider (Anthropic) only to generate an immediate response. Under our terms it is not used to train their models.
• Minimal retention. Of your AI interactions, only your practice-task attempts are stored (so we can show your feedback and progress). Tutor questions and playground prompts are used to generate the response and are not retained by us.
• Bounded tools. The in-lesson assistant is scoped to the lesson you are on. It is built to coach, not to answer off-topic questions or act outside the lesson.
• Your call on personalisation. Personalisation re-frames examples to your role; it never changes what is taught, and you can turn it off in one click.
• Use rounded figures. We ask learners to use illustrative or rounded numbers in AI tools rather than confidential company data, and say so in the tools themselves.

Accuracy and human oversight

• Regulatory content is human-authored. UK regulatory material (FCA, PRA, UK GDPR, the Companies Act 2006) is written and served verbatim, and is never paraphrased or generated by AI.
• Verification-first. The course teaches you to check AI output rather than trust it. AI-generated feedback supports your learning; it is not a definitive answer.
• Educational content only. The course is not legal, tax, accounting or regulatory advice.

Governance

• ICO registered. We are registered with the UK Information Commissioner's Office (registration ZB649703) as a data controller.
• Processor agreements. We have data processing agreements in place with our providers (Supabase, Vercel, Stripe, Resend, Anthropic) and do not sell your data.
• Your rights. You can access, export or delete your data from your account settings, or by emailing us. See the Privacy Policy for the full list.

Reporting a concern

If you believe you have found a security issue, or have a data-protection concern, email info@primeai.solutions. We will acknowledge it promptly and respond as quickly as we can.

This page describes our current practices and will be updated as they evolve. It is provided for transparency and is not a contractual warranty; enterprise customers can request our processing terms directly.