Trust

How we look after your data

We hold ourselves to the same standard we help you meet. Here's how Saiela handles data, in one place, with links to the detail.

Where checks happen, and what we keep

The swap happens in the browser, on the person's own computer.
The text of prompts and the AI's answers is never sent to Saiela.
The audit log records what happened, never what anyone wrote, with people shown as IDs, not names, by default.

Every Saiela account is stored in a UK data region, Microsoft Azure's UK South, on every plan.

Every company that processes customer data for us is listed on our sub-processors page, and we tell customers before we add or replace one.

Two-step sign-in on every plan
Single sign-on and verified domains on Team
Roles, and time-limited read-only access for an auditor or insurer
An audit log that shows if anyone has changed it (a SHA-256 hash chain you can check in your browser)
Retention you choose on Team (12, 24 or 36 months), with legal hold
Encrypted in transit with TLS (HTTPS) everywhere, and at rest by Microsoft Azure's storage and database encryption, with keys held in Azure Key Vault

We hold ourselves to the same standard we help you meet.

Our data processing agreement (DPA): It's part of our terms: the data processing terms, the contract UK GDPR Article 28 requires.
ICO registration: SimpleKPI Ltd is registered with the Information Commission (ICO), number ZB902250.

Found something that looks like a security problem? Tell us privately.

Try it free for 7 days and check for yourself.