Data storage
All data is encrypted in transit (TLS) and at rest. Study data — transcripts, analysis results, participant info — lives in managed databases with access controls.Account access
Two-step verification can be required across your whole workspace. Email us to turn it on, and members without a second factor are prompted to set one up with an authenticator app before they can continue. Studies can also be marked private, limiting them to their owner, the people explicitly added, and workspace Admins rather than everyone in the workspace.Recordings
Session recordings and clips are in secure cloud storage with signed, time-limited playback URLs, meaning:- In Humanize, only authenticated users with study access can view them.
- Those users can also create a share link. Anyone with that link can watch without signing in.
- Links expire after a set period. The person sharing picks how long a share link lasts, up to a year. You can’t turn a link off before it expires, so pick the shortest period that works.
Third-party services
Humanize uses a few third-party services:- Transcription — a speech-to-text service processes session audio.
- Text-to-speech — generates the AI moderator’s voice.
- Video processing — creates clips and supercuts from recordings.
- AI analysis — large language models process transcripts, audio, and video to generate themes, summaries, emotion analysis, and insights.
Compliance
SOC 2 Type II certification is in progress, covering humanize.app, go.humanize.app, and the Humanize API. For security documentation or questionnaires, email us.Data retention
Study data stays as long as your account is active. Archived studies remain accessible but aren’t actively processed. Need something deleted? Email us.Participant data
Participant data includes contact details, screener answers, demographics, a pre-session camera check, recordings, transcripts, and the analysis built from them. It’s scoped to your study and only accessible to users with permission. Not shared across studies or with other customers. Analysis output goes a step further: reports never show participant names. People appear as their segment and age, or as a stable participant number. Names stay on the participant sidebar for the people on your team who need them, and shared report links carry the anonymized form. Participants agree to the study privacy policy when they confirm their spot, before any session data is collected.GDPR
If you’re researching with participants in the EEA:- Participants consent during signup before any data is collected.
- They’re told sessions will be recorded.
- You can request deletion of participant data by contacting us.
- Processing is covered by our data processing agreement.
Need a DPA for your organization? Email us and we’ll get one set up.