People
CoSprint People · Security

Your data stays yours

CoSprint doesn't keep your originals, its staff can't open your data, and nothing is used to train AI. What a review needs is all that stays — and you can take it back any time.

  • Originals aren't stored at CoSprint

    AI pulls out only the evidence it needs; originals aren't kept. A review holds only short quotes and links back to your tools.

  • CoSprint staff can't open your data

    No one at CoSprint has standing access. Support happens only within what you allow, and it's recorded for you.

  • Never used to train AI

    Your data is processed only under terms that forbid model training and retention.

  • Take it back any time

    Disconnecting ends our access at once. When the contract ends, everything is deleted and confirmed in writing.

Only what you choose to connect

Exclusions are on by default. Widening the scope takes a separate confirmation. Your admin decides what's in scope.

  • SlackChannels the app is invited toDMs, group DMs, channels you exclude
  • Jira · ConfluenceProjects and spaces you chooseHR and security projects, personal spaces
  • GitHubPRs, reviews and issues in chosen reposPrivate personal repositories
  • Google WorkspaceDocuments in chosen shared drivesPersonal drives, mail, calendar
  • NotionPages the integration is invited toPersonal pages
  • Claude · ChatGPT EnterpriseWork conversations of employees who consentedPersonal accounts, employees who didn't consent
  • HR systemOrg, role, level, start and leave datesPay, ID numbers, health information

How we handle your data

  • No passwords — official app approval, or a read-only token your admin issues
  • Encrypted in transit and at rest, with each company's data kept separate
  • Private messages stay private: DMs, personal drives and mail are left out
  • Evidence links open in your tools under their permissions; inside CoSprint, each role sees only its scope
  • Message counts and time online are never collected as scores
  • Who opened whose review is logged, and your HR team can export it

Nothing changes behind your people's backs

  • Every judgement can be traced

    Each line of a review links to the message, issue or document behind it, opened under that tool's own permissions.

  • Employees hear it from you first

    Before any records are read, tell employees the way your rules and local law require. Jello drafts the notice for you.

From SaaS to running inside your cloud

  • Startups and pilotsSaaSSeparated per company, with a data processing agreement
  • Mid-size and large companiesSaaS + your own keySwitch your key off and access ends. SSO and audit log export
  • Finance and strict securityInstalled in your cloudRuns inside your own cloud account. Data doesn't leave you

Security questions

Can CoSprint staff see our employees' messages?

No. Staff have no standing access to customer data. Support happens only within the scope you allow, and it's recorded for you.

Is our data used to train AI models?

No. AI processing happens only under terms that forbid training and retention. On Enterprise, the model can run in your own cloud account.

What happens if we disconnect or leave?

Disconnecting ends our access at once. When the contract ends you can export reviews and logs, and everything is deleted within 30 days, with written confirmation.

Can we get detailed security documents?

Yes. Our data processing agreement (cosprint.ai/en/dpa) and sub-processor list (cosprint.ai/en/subprocessors) are public. The security overview is shared under NDA during evaluation.

This page sets out the security principles of CoSprint People ahead of launch; items are rolled out in stages. The data processing agreement and sub-processor list are public; the security overview is shared under NDA during evaluation.

Bring your security team’s questions.

About CoSprint PeopleTalk to sales