Enterprise Data Privacy & AI Ethics Commitments
Last updated: 26 September 2026 · Formal commitments published by the Information Security, Privacy, and Engineering Governance Teams.
Personal Academy covenants that customer IP remains 100% customer-owned. Customer training materials, course drafts, and learner queries are never used to train public or foundation AI models. We provide native Bring Your Own Key (BYOK) support, automated GDPR / DPDP data subject rights, and full human-in-the-loop oversight for all consequential decisions.
1. Customer Intellectual Property & Data Ownership Guarantee
100% Customer Ownership
All training manuals, course modules, custom videos, quizzes, question banks, brand collateral, and employee learner performance metrics uploaded to or generated within Personal Academy remain the exclusive intellectual property of your organization.
Zero Platform Licensing Claim
Personal Academy acquires no rights, title, or interest in customer proprietary content. We process organizational data solely to execute the learning management software services defined in our Master Subscription Agreement and DPA.
Permanent Portability
Customers maintain the permanent capability to extract course packages (standard SCORM ZIP bundles, PDF transcripts, and standardized JSON/CSV gradebooks) at any time without administrative lock-in.
2. Legally Binding AI Model Non-Training Commitment
Personal Academy covenants and warrants that customer queries, uploaded training documentation, course syllabus drafts, learner chat interactions, and assessment submissions are NEVER used to train, retrain, fine-tune, or validate any public or commercial foundation models, including models operated by OpenAI, Anthropic, Google, Meta, or third-party gateways.
Enterprise Commercial API Agreements
All inferences execute under verified enterprise API agreements where providers are contractually bound to exclude customer inputs from public training lakes.
Ephemeral Execution
Prompts and completions are processed in volatile memory for the duration of the HTTP generation request and are never written to secondary training stores.
Tenant Control & Instant Opt-Out
Platform administrators hold full autonomy to disable all AI capabilities platform-wide or selectively per feature. Toggles execute immediately at the database layer on subsequent requests.
3. Enterprise Bring Your Own Key (BYOK) Architecture
For organizations with specialized compliance obligations, existing enterprise volume commitments, or strict residency requirements, Personal Academy provides native Bring Your Own Key (BYOK) support across major foundation model providers:
Envelope Encryption for Secrets
Organization-supplied API credentials are sealed with application-layer AES-256-GCM encryption using dedicated envelope keys prior to storage. Cleartext keys are never stored in databases or logged in plaintext.
Direct Commercial Billing
BYOK inference charges accrue directly against your organization’s enterprise contract with Microsoft Azure OpenAI, Anthropic, or OpenAI, giving your finance team complete oversight over token consumption and rate tiers.
Regional Execution Boundary
When using private Azure OpenAI or Google Vertex AI deployments via BYOK, all model calls execute strictly within your selected cloud geography (e.g. EU or US data boundaries).
4. Data Subject Rights (GDPR / UK GDPR / DPDP Fulfillment)
Personal Academy provides automated, self-service tools and operational processes ensuring full compliance with European and international privacy regulations:
Right to Access & Portability (GDPR Art. 15/20)
Any authenticated user can trigger a self-service data export via account settings. The platform compiles all associated profile metadata, course progress, assessment submissions, and certificate records into an accessible, structured JSON package.
Right to Erasure / Account Purge (GDPR Art. 17)
Authenticated users can request complete account erasure with verified confirmation. The automated purge sequence pseudonymizes learning history, detaches user references across multiple tenant memberships, and completes erasure across active tables within 30 calendar days.
Looking for the Live AI Model Register?
Our live AI Feature Transparency Register provides real-time disclosures for every AI capability active on the platform, including exact model identifiers, prompt boundaries, and EU AI Act classification.
View Live AI Transparency Register