Security & Trust

Identity and access

The Portal uses authenticated sessions and role-based permissions to manage access to account, client and staff areas. Access to internal assessment reports requires the relevant platform permissions. The information and features available to a user depend on their account and organizational role.

When you sign in through a third-party provider or your organization's single sign-on service, we use the identity information supplied through that connection to authenticate you and manage your Portal access. Organization-managed SAML sign-in is available where enabled. Your organization's identity provider and administrator may control whether you can sign in. The Privacy Policy explains the information processed for these purposes.

Protect your sign-in credentials and verification links, and follow your organization's access requirements. Removing access to an account and deleting its associated records are separate processes; data retention and rights requests are explained in the Privacy Policy.

Assessments, reports and sharing

Guest assessment summaries and internal assessment reports have different access paths. Emailed guest-summary links are time-limited and can be revoked. They provide access to the guest summary, while internal reports require authorized staff access.

When booking a call, you can choose whether to associate an eligible assessment with your booking so it can be used to prepare for that call. A "call" means a phone call or an online meeting with audio or video. This choice is separate from agreeing to receive marketing messages.

AI-assisted assessments process the answers and relevant business context you provide to generate analysis, findings and recommendations. Depending on the assessment mode you choose, processing may also involve transcripts, microphone audio, generated speech or an avatar service. The Privacy Policy describes these activities and the service providers involved. Review generated recommendations before relying on them for business decisions.

Service providers and personal information

We use service providers to support functions including hosting, authentication, AI processing, billing, email delivery and scheduling. The information involved depends on the feature used and the provider's role. Our Privacy Policy explains the purposes, recipient categories and applicable international processing arrangements.

Billing records in the Portal include transaction and subscription information and masked payment-card details. Payment processing is handled through Stripe. Optional profile photos are delivered through public storage URLs, so photos should not contain confidential information.

Sharing or downloading a report can create copies outside the Portal. Retention and deletion requests are handled according to the applicable purpose, legal requirements and contractual responsibilities. The Privacy Policy explains retention criteria and how to make a request.

Privacy choices and communications

We handle applicable data-rights requests for the website and Portal. Our Privacy Policy explains how to exercise your rights, withdraw consent where processing relies on consent, and contact us about privacy concerns. Where we process information under a client's instructions, the client's responsibilities and the applicable agreement also matter.

Optional marketing is separate from account access and requested service communications. Our commercial email practices include sender identification and unsubscribe options where required, and we honor requests to unsubscribe from marketing messages. We may continue to send communications needed to administer your account or fulfil a request, where permitted.

SOC 2 progress

We are actively preparing for a SOC 2 Type 2 examination. We will update this page as that work progresses.

Portal service status

Visit the Sonique AI status page for service-status information concerning Portal access, including loading the Portal, signing in and reaching the authenticated workspace.

Any contractual service levels and related remedies are those expressly set out in your applicable agreement.

Policies and questions

Read our Privacy Policy for information about personal data, privacy choices and rights requests, including the privacy contact details. Our Terms of Service explain the terms that apply to using the website and Portal.

For security questions, privacy concerns or rights requests, contact security@soniqueai.io.

This page provides information about our practices and assurance work. Your applicable agreements govern the contractual commitments for your services.

Translations of our website and Portal are provided as a courtesy. If a translation differs from the English version, the English version prevails.