Security & privacy

Your pricing research, and who sees it.

Run a pricing survey yourself, or have us run it for you. Either way, your questions, your respondents' answers and anything you upload pass through the services listed below and nowhere else. What's shipped is marked shipped; what we're still writing down is marked in progress.

Albi never sees respondents' names or emails

Shipped

Panel respondents reach your survey with a panel ID, not a name or email. Albi uses the ID to spot duplicates and settle payment with the panel. Besides your questions' answers, the survey records only timing and quality signals.

Synthetic respondents

Shipped

Synthetic answers are generated by Anthropic's Claude from your survey and the audience you describe. No real person's data is used to make them.

Card payments go through Stripe

Shipped

You pay for a launch on Stripe's checkout. Albi never sees or stores your card number.

Auth & access control

Shipped

Supabase Auth with row-level security at the database, plus per-route auth enforcement in every API handler. The service-role client is used only server-side, never exposed to the browser.

When we run the study for you

In progress

If you have us run a study for you, named Albi team members assigned to your account design, field and analyze it inside your workspace, under confidentiality, and they access only the accounts they're assigned to. Otherwise staff access your data only for support, operations or security. Staff access to customer workspaces is logged, and the log can't be edited or deleted.

Data isolation between customers

In progress

Each customer's surveys, responses and uploaded data sit in their own account and are never shown to another customer or used in another customer's study. The data model is built; the account-switcher UI is rolling out.

AI provider

In progress

AI runs on Anthropic (Claude). Enterprise data-use terms are being finalized before we assert specifics here.

Encryption at rest & in transit

In progress

Credentials you give us are encrypted, and traffic is served over TLS. Specific standards and certifications (SOC 2, AES-256, TLS versions) are being formalized before we make a numbered claim.

No training on customer data

In progress

Your surveys and responses are used to run your study, not to train models. The full data-use posture is being documented and verified before publication.

Sub-processors

Who else handles your data.

Albi runs on these services. Each processes only what it needs for the purpose listed. Under our DPA, we give notice before adding or replacing one.

Sub-processorPurposeDataLocation
VercelApplication hostingAll app data in transitUnited States (Washington, D.C.)
SupabaseDatabase, authentication, file storageAccount data and the data you bring, at restUnited States (Ohio)
AnthropicAI analysis and generation, synthetic respondentsPricing data, survey questions and respondents' answers (for analysis)United States
StripePayments to Albi; provisioning you initiateBilling contact; your Stripe data, when connectedUnited States / global
ResendTransactional emailUser email addressesUnited States
MixpanelProduct analytics, session replayUsage and device data, IP address (inputs masked)United States
PostHogAnalytics, error tracking, session replayUsage and device data, IP address, errors (inputs masked)United States
PureSpectrumOptional survey panelStudy settings and targeting, respondent IDs, completion and quality status (not survey answers)United States
CintOptional survey panel exchangeStudy settings and targeting, respondent IDs, completion and quality status (not survey answers)United States / EU

Survey panel (independent controller)

Prolific Academic Ltd, 483 Green Lanes, London N13 4BS, UK. When you choose a Prolific panel, Prolific recruits and pays the participants under its own terms and privacy policy. It is an independent controller, not a sub-processor of Albi, so it signs no Article 28 DPA. Albi sends it the study settings and approval decisions, and receives participant IDs. Survey answers go to Albi, not to Prolific. Prolific stores participant data on Google Cloud Platform in Belgium.

Data Processing AddendumShipped

A DPA for the data you bring.

Our Data Processing Addendum covers GDPR, UK GDPR and CCPA/CPRA. When you bring your own company's data, you are the controller and Albi is the processor. It sets out what Albi may do with that data, the security measures, the sub-processors above, deletion on request, and EU and UK transfer clauses.

Version 1.0, in force October 19, 2026.

Connecting StripeEarly access

Optional. Read-only. Nothing changes without your approval.

Running a survey doesn't need your Stripe account. Design partners on the early-access modules can connect it with a read-scoped key, encrypted per project. Albi reads from it and never edits it. The only writes happen in a provisioning step you start, after you approve the design: a dry run first, rolled out by the cohort you choose, journaled and revertible per resource and per run.

Questions about data handling?