How PersonaHive protects your concepts
Unreleased concepts are often the most sensitive material a brand gives a research vendor. This page states what happens to them in PersonaHive, who can access them, and where our assurances stop.
- Respondent exposure
- None
- Production platform
- Microsoft Azure
Control 1
No respondent ever sees your concept
Synthetic research removes respondent exposure from the study workflow.
Studies run on synthetic personas grounded in country-specific census data and aggregated public statistics, with the method validated against real surveys. There is no recruited panel, respondent, or screener participant, so an unreleased concept cannot leak through a respondent or reach a competitor's employee sitting on a panel.
Control 2
Your research stays inside your organization
Customer work is separated by authenticated organization access.
Your studies, questions, stimulus images, personas, and results belong to your organization's workspace. Access is limited to authorized members of that organization. Other PersonaHive customers cannot see, search, or reuse your research.
Customer content is not used to build shared templates, personas, or benchmarks. Access controls restrict authenticated requests to the records available to that account.
Control 3
Human access is restricted
Administrative access is restricted to specific operational and legal needs.
Administrative access is tied to individual accounts and permitted only to resolve a support request you raise, investigate a fault, or meet a legal obligation.
Control 4
Your content does not train AI models
Production inference runs through Microsoft Azure AI Foundry under enterprise terms.
Nothing you submit is used by PersonaHive to train or fine-tune a foundation model. Our production language models run through Microsoft Azure AI Foundry, not a consumer AI service.
Microsoft states that prompts and outputs for Azure-hosted generative AI services are not available to other customers or model providers and are not used to train foundation models without permission. Provider processing and any abuse-monitoring retention follow Microsoft's applicable enterprise terms and the configuration of the production resource. Current control details are available during a security review.
Control 5
Encrypted infrastructure on Microsoft Azure
Customer content is protected in transit and at rest by the production infrastructure.
PersonaHive runs on Microsoft Azure. Connections to the service use HTTPS with TLS, and stored data is encrypted at rest by the infrastructure provider. Access is governed by least-privilege controls and individual accounts.
Microsoft's certifications cover the Azure infrastructure. They do not represent a certification of PersonaHive as a company. Region, network, cipher, and protocol details are supplied during a security review where they can be matched to the production services in scope.
Control 6
Documentation for your security review
The Privacy Policy names the providers involved in delivering the service.
Our current service providers cover the Lovable Cloud backend (Supabase) for database hosting, authentication, and edge functions, Microsoft Azure infrastructure and AI inference, Polar for payment handling, Stripe as Polar's payment processor, and Resend for transactional email. The Privacy Policy lists their purposes and locations.
Enterprise customers can request a Data Processing Agreement with Standard Contractual Clauses, a standard MSA, and help with a security questionnaire at founders@personahive.ai.
Control 7
Clear assurance boundaries
We distinguish implemented controls from provider certifications and future commitments.
We publish no certification PersonaHive has not completed. If your procurement process requires a specific attestation, control, or contractual commitment, ask us and we will state plainly what we can and cannot supply today.
To report a vulnerability, email founders@personahive.ai with enough detail to reproduce it. Please allow a reasonable period for investigation and remediation before public disclosure. We do not pursue legal action against good-faith research that avoids privacy violations, service degradation, and access to data that is not your own.
Procurement and security review
Bring us your requirements
We can support your questionnaire, DPA, MSA, and control review with direct, current answers from the team responsible for the platform.
Prefer email? Write to founders@personahive.ai.