Security

Where your recording lives, and who can reach it

This product records people talking. That makes the answers below the most important thing on the site, so they are stated specifically rather than reassuringly.

A single closed steel filing drawer in a quiet corridor, softly lit from one side.
The answers

Who can see my analysis?

Only you, until you choose otherwise. Analyses are private by default, and sharing is an explicit action you take per analysis, not a setting someone else can flip on your behalf.

How is one organisation kept out of another's data?

By row-level security in the database itself, not by checks in application code. Every query runs as the signed-in user, and the policy decides what rows exist for them, so a bug in a page, an API route or a future mobile app cannot widen access, because the wall is underneath all of them. This is verified by a test suite that asserts a member of one organisation reads nothing belonging to another, and that removing any single policy visibly collapses exactly what it protected.

Where is the video stored, and for how long?

Encrypted in object storage, and kept until you delete it. Deletion removes the underlying media, not merely the database row pointing at it, a record that survives its own erasure is the failure mode this is designed against.

Can my manager see my score?

Not unless you share it. Where a team view exists, it reports aggregates only, and it stays hidden until at least four people have been analysed, because below that threshold a team figure plus your own score lets someone recover a colleague's score by subtraction. That floor is enforced in one place in the code and is not configurable per customer.

Is my data used to train models?

No. Your recordings and analyses are not used to train or improve any model, and are not sold, shared or licensed to anyone.

What consent is required before an analysis runs?

Explicit, per-recording consent from the person on camera. Consent is recorded with a timestamp against the analysis, and an analysis cannot proceed without it.

Are you SOC 2 or ISO 27001 certified?

Not yet, and no badge for either appears anywhere on this site. SPECTRIA is currently built and operated by its founder; the controls described above are real and tested, but they have not been through a third-party audit. When that changes it will be said here plainly, with the report available on request.

How do I get my data out, or erased?

From your settings, at any time, without asking anyone. Export returns your analyses and the measurements behind them; erasure removes them along with the source media.

Found something wrong?

Report it directly, it reaches the person who wrote the code.

Every claim above is true of the system as built, and if that ever stops being true, this is where it gets said, plainly.