Security

StudyBridge AI employs enterprise-grade security practices to protect your data. Our infrastructure includes Web Application Firewalls (WAF), DDoS protection, rate limiting, and continuous security monitoring. We perform regular vulnerability assessments and maintain an incident response programme.

All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256 encryption. Database connections use SSL certificates, and API keys are stored in encrypted vaults. We follow the principle of least privilege for all internal access.

The StudyBridge system is hosted on enterprise-grade cloud infrastructure with SOC 2 Type II certification. We utilise geographically distributed servers with automatic failover for high availability. Regular backups are performed and stored in encrypted, geographically separate locations. Our infrastructure providers comply with ISO 27001, SOC 2, and GDPR requirements.

Our learning system is built on curriculum-aligned, educationally verified content with robust accuracy guardrails to prevent misinformation. Your data is never used to train third-party models. All outputs are quality-monitored and clearly labelled. In the rare event that reliable information is unavailable, the system will transparently let you know rather than guess.

We are committed to protecting your privacy and complying with global data protection regulations including GDPR, FERPA, COPPA, and POPIA. We do not sell personal data to third parties. We minimise data collection to what is necessary for providing our educational services. You can exercise your data rights at any time through your Account Settings or by contacting our privacy team.