Trust

Security & data

Last updated 27 September 2026

We only claim what is true today. Where something is not yet in place, we say so.

Where your data lives

Risposti’s application and database run on EU servers (Hetzner, Nuremberg). The marketing site is served via Cloudflare. Automated text-to-speech and model inference are provided by US sub-processors (see below).

Encryption

In transit: TLS everywhere. At rest: not yet — the EU host volume is not block-level encrypted, so we do not claim it. It is tracked as a gap and we will say when it is in place.

Your data is isolated

Every session, practice profile and free-tier entitlement is scoped to your account by user id, and an automated two-tenant test proves one account cannot read or use another’s data.

How your data is used

Our AI vendors — voice and model — are pinned to zero-retention endpoints that do not store or train on your data. We may keep your practice data to improve the service; you can opt out of any training use, and export or delete your data at any time. We never sell it.

AI disclosure

The buyer you practise against is an AI, and your results are produced by AI. We say so plainly.

Sub-processors

Hosting: Hetzner (EU). Voice: ElevenLabs (US). Model inference: OpenRouter (US). CDN and email: Cloudflare. The full list, with purposes and locations, is at /trust.

Retention

We keep your practice transcripts, scores and audio to build your training record and improve the service. You can export or delete your data at any time from your account or by emailing us. A fixed audio-deletion window is being rolled out; until then, deletion on request is honoured promptly.

Incidents

We maintain an incident-response process and will notify affected customers without undue delay if a breach is likely to result in serious harm. Security contact: [email protected].

What we do not claim

We do not hold SOC 2 or ISO 27001. We have not completed an external penetration test. At-rest encryption is not yet in place. We will update this page as each changes.

Related: privacy policy · terms · open the app.