Trust
Security overview
How we protect your account, your content, and your learners' data. Last updated July 17, 2026. This page is a plain-language summary, not a contract — for a DPA or security questionnaire, email [email protected].
Hosting & encryption
Trivana uses managed cloud services to deliver the application and media. Connections use TLS, and stored data is protected with encryption provided by the services that host it.
Access control
Buyer workspaces require authenticated access. Participant experiences require a valid unlisted link, while authorization controls separate customer workspaces and projects. Customer content, cohorts, and participant results are not intentionally exposed to other customers.
Authentication
Buyer and creator accounts use supported social or email sign-in. SSO and SCIM are roadmap capabilities and are not included in the founding pilot.
Learner data
Players can join private reinforcement rounds with no account. We store the self-asserted name, pseudonymous participant/session identifiers, response events, score, completion time, and play timestamps needed for the private cohort recap. Names are not identity-verified. Exports are sanitized against spreadsheet-formula injection.
Data retention & deletion
You can request deletion of your account, a specific quiz's learner results, or a cohort's data by emailing support. We target removal from active systems within 30 days after verification, subject to legal retention requirements. Limited residual copies may remain until bounded backup cycles complete. On termination, customer content and learner records can be exported or deleted as provided by the applicable agreement.
Service providers
Trivana uses third-party providers for services such as hosting, payments, email, generated media, analytics, and monitoring. The current register identifies the providers and data categories relevant to customer diligence without publishing Trivana's internal architecture.