--- title: Security & Privacy | 7Scholar description: Learn how 7Scholar protects confidential research with EU data residency, encryption, workspace isolation, GDPR-aligned controls, and a strict no-model-training commitment. route: /security eyebrow: Security & Privacy socialDescription: "Your confidential research stays yours: protected in Europe, encrypted, and never used for model training." keywords: - 7Scholar security - EU data residency - GDPR research software - confidential project data - confidential medical writing --- # Your research stays yours. Sources, results, client materials, and drafts are encrypted, stored in the EU, and never used for model training. - EU data storage - No model training - Encryption at rest & in transit - [Read our privacy policy](/resources/privacy-policy) - [Discuss your requirements](mailto:kasra@7scholar.com?subject=7Scholar%20security%20review) ## Assurance summary ### Data protection at a glance - **Data storage** — EEA - **Model training** — Never - **Encryption** — Transit + at rest - **Account & document deletion** — 30–90 days (AI providers may retain longer under their own terms) These commitments cover project content and model outputs. ## Protection by design ### Safeguards for sensitive research workflows Controls cover storage, access, model requests, and deletion. #### EU data stays in the EEA EU users' personal data is stored within the EEA. AI processing runs through contracted providers, which may process data outside the EEA under appropriate safeguards. #### Encrypted throughout its lifecycle Data is encrypted in transit and at rest. #### Private workspace boundaries Account and workspace controls limit material to authorized users. #### Only the context a feature needs Model features receive only the context required for the request. #### Never used for model training Project content is never used for model training. #### Clear deletion timelines Account and document data is removed within 30 days of a deletion request. AI providers we use for processing may retain data under their own contractual terms — for example, Google's terms allow up to roughly 7 months for a deletion instruction to complete. ## Your data journey ### Clear boundaries from upload to deletion #### You add project material Project files arrive over an encrypted connection. #### It stays in your workspace Access controls isolate each workspace; EU personal data is stored in the EEA. #### Model requests use limited context Only required context goes to contracted providers, with no model-training rights. #### You keep control You control uploads, processing, exports, and deletion. ## European privacy ### Built around EU expectations 7Scholar is operated in Finland under European data-protection requirements. > EU users: personal data stored in the EEA - Operated by Kopilo Oy in Finland under EU data-protection law. - EU personal data is stored in the EEA. AI processing runs through contracted providers, which may operate outside the EEA under appropriate safeguards. - Cross-border transfers use an approved legal safeguard. - Request access, correction, deletion, restriction, objection, or portability. - EU and EEA analytics stay off until you consent. - [See the full privacy policy](/resources/privacy-policy) ## Request a security review ### Bring your security team. Review our data handling before confidential material enters a project. - [Request a security review](mailto:kasra@7scholar.com?subject=7Scholar%20security%20review) - [Read our terms](/resources/terms-of-service) We will be direct about product fit and any additional controls required.