Security & Privacy

Your research stays yours.

Sources, results, client materials, and drafts are encrypted, stored in the EU, and never used for model training.

EU data storageNo model trainingEncryption at rest & in transit

Assurance summary

Data protection at a glance

Data storage
EEA
Model training
Never
Encryption
Transit + at rest
Account & document deletion
30–90 days (AI providers may retain longer under their own terms)

These commitments cover project content and model outputs.

Protection by design

Safeguards for sensitive research workflows

Controls cover storage, access, model requests, and deletion.

EU data stays in the EEA

EU users' personal data is stored within the EEA. AI processing runs through contracted providers, which may process data outside the EEA under appropriate safeguards.

Encrypted throughout its lifecycle

Data is encrypted in transit and at rest.

Private workspace boundaries

Account and workspace controls limit material to authorized users.

Only the context a feature needs

Model features receive only the context required for the request.

Never used for model training

Project content is never used for model training.

Clear deletion timelines

Account and document data is removed within 30 days of a deletion request. AI providers we use for processing may retain data under their own contractual terms — for example, Google's terms allow up to roughly 7 months for a deletion instruction to complete.

Your data journey

Clear boundaries from upload to deletion

  1. 01

    You add project material

    Project files arrive over an encrypted connection.

  2. 02

    It stays in your workspace

    Access controls isolate each workspace; EU personal data is stored in the EEA.

  3. 03

    Model requests use limited context

    Only required context goes to contracted providers, with no model-training rights.

  4. 04

    You keep control

    You control uploads, processing, exports, and deletion.

European privacy

Built around EU expectations

7Scholar is operated in Finland under European data-protection requirements.

EU users: personal data stored in the EEA

  • Operated by Kopilo Oy in Finland under EU data-protection law.

  • EU personal data is stored in the EEA. AI processing runs through contracted providers, which may operate outside the EEA under appropriate safeguards.

  • Cross-border transfers use an approved legal safeguard.

  • Request access, correction, deletion, restriction, objection, or portability.

  • EU and EEA analytics stay off until you consent.

See the full privacy policy

Bring your security team.

Review our data handling before confidential material enters a project.

We will be direct about product fit and any additional controls required.