Your pricing research, and who sees it.
Run a pricing survey yourself, or have us run it for you. Either way, your questions, your respondents' answers and anything you upload pass through the services listed below and nowhere else. What's shipped is marked shipped; what we're still writing down is marked in progress.
Albi never sees respondents' names or emails
ShippedPanel respondents reach your survey with a panel ID, not a name or email. Albi uses the ID to spot duplicates and settle payment with the panel. Besides your questions' answers, the survey records only timing and quality signals.
Synthetic respondents
ShippedSynthetic answers are generated by Anthropic's Claude from your survey and the audience you describe. No real person's data is used to make them.
Card payments go through Stripe
ShippedYou pay for a launch on Stripe's checkout. Albi never sees or stores your card number.
Auth & access control
ShippedSupabase Auth with row-level security at the database, plus per-route auth enforcement in every API handler. The service-role client is used only server-side, never exposed to the browser.
When we run the study for you
In progressIf you have us run a study for you, named Albi team members assigned to your account design, field and analyze it inside your workspace, under confidentiality, and they access only the accounts they're assigned to. Otherwise staff access your data only for support, operations or security. Staff access to customer workspaces is logged, and the log can't be edited or deleted.
Data isolation between customers
In progressEach customer's surveys, responses and uploaded data sit in their own account and are never shown to another customer or used in another customer's study. The data model is built; the account-switcher UI is rolling out.
AI provider
In progressAI runs on Anthropic (Claude). Enterprise data-use terms are being finalized before we assert specifics here.
Encryption at rest & in transit
In progressCredentials you give us are encrypted, and traffic is served over TLS. Specific standards and certifications (SOC 2, AES-256, TLS versions) are being formalized before we make a numbered claim.
No training on customer data
In progressYour surveys and responses are used to run your study, not to train models. The full data-use posture is being documented and verified before publication.
Who else handles your data.
Albi runs on these services. Each processes only what it needs for the purpose listed. Under our DPA, we give notice before adding or replacing one.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Vercel | Application hosting | All app data in transit | United States (Washington, D.C.) |
| Supabase | Database, authentication, file storage | Account data and the data you bring, at rest | United States (Ohio) |
| Anthropic | AI analysis and generation, synthetic respondents | Pricing data, survey questions and respondents' answers (for analysis) | United States |
| Stripe | Payments to Albi; provisioning you initiate | Billing contact; your Stripe data, when connected | United States / global |
| Resend | Transactional email | User email addresses | United States |
| Mixpanel | Product analytics, session replay | Usage and device data, IP address (inputs masked) | United States |
| PostHog | Analytics, error tracking, session replay | Usage and device data, IP address, errors (inputs masked) | United States |
| PureSpectrum | Optional survey panel | Study settings and targeting, respondent IDs, completion and quality status (not survey answers) | United States |
| Cint | Optional survey panel exchange | Study settings and targeting, respondent IDs, completion and quality status (not survey answers) | United States / EU |
Survey panel (independent controller)
Prolific Academic Ltd, 483 Green Lanes, London N13 4BS, UK. When you choose a Prolific panel, Prolific recruits and pays the participants under its own terms and privacy policy. It is an independent controller, not a sub-processor of Albi, so it signs no Article 28 DPA. Albi sends it the study settings and approval decisions, and receives participant IDs. Survey answers go to Albi, not to Prolific. Prolific stores participant data on Google Cloud Platform in Belgium.
A DPA for the data you bring.
Our Data Processing Addendum covers GDPR, UK GDPR and CCPA/CPRA. When you bring your own company's data, you are the controller and Albi is the processor. It sets out what Albi may do with that data, the security measures, the sub-processors above, deletion on request, and EU and UK transfer clauses.
Optional. Read-only. Nothing changes without your approval.
Running a survey doesn't need your Stripe account. Design partners on the early-access modules can connect it with a read-scoped key, encrypted per project. Albi reads from it and never edits it. The only writes happen in a provisioning step you start, after you approve the design: a dry run first, rolled out by the cohort you choose, journaled and revertible per resource and per run.