How we handle your data

Your participants, logged entries and evidence packs are kept in your Drillroom account. We use a few service providers to run it, for hosting, sign-in, email, payments and AI, and the privacy page lists each one.

When you ask Drillroom to draft findings after a session, it sends your logged entries to our AI provider. When you ask for suggested wording for a scenario before a session, it sends your corrections and the parts of the scenario they change. The provider does not train on either and deletes them within 30 days, except where it must keep them for misuse checks or by law. Nothing is sent to it while a session is running.

Nothing on the live screen is written by a model.

Certification

Drillroom holds no security certification of its own.