Trust Center
Last updated: July 25, 2026
FluencyRank is a B2B workplace AI fluency training and readiness platform. This Trust Center summarizes how we approach security, privacy, AI governance, and employee data use for early B2B pilots.
FluencyRank is being built with future security, privacy and AI governance readiness in mind. We do not claim ISO, SOC, or similar certifications.
Security overview
The product runs on Vercel with data and authentication on Supabase. Employees sign in with email one-time codes. Access is organization-scoped: members see their own progress; champions (admins) manage their organization. We use encryption in transit and provider-managed encryption at rest. Privileged server access uses least-privilege staff practices and environment-based secrets — never in the client.
Hosting analytics and product analytics are documented under Privacy. Formal certifications are not claimed.
Privacy & data protection
We process work email, profile details, organization membership, and training activity (challenge attempts, XP, readiness signals) to operate the service. Marketing waitlist and pilot request forms collect prospect contact details. We do not sell personal data. A Data Processing Agreement (DPA) is available for B2B pilots upon request and legal review.
Optional product analytics (PostHog, EU) and hosting analytics (Vercel Web Analytics / Speed Insights) load only after you accept analytics cookies. Full cookie and processor details are in the Privacy Policy.
AI governance
FluencyRank trains workplace AI fluency and safe adoption habits through authored challenges and champion tools. Readiness scores reflect platform engagement — not a comprehensive capability assessment or professional certification. Challenge content is reviewed through our release process. We do not currently run a production LLM on employee challenge answers; if AI feedback is added later, it will remain advisory with human oversight.
Organizations remain responsible for their AI usage policies. FluencyRank does not guarantee regulatory compliance outcomes.
Employee data use
FluencyRank is designed for AI fluency training and workforce readiness insights. Scores, XP, badges and reports are intended to support learning and identify training needs. They should not be used as the sole basis for employment, promotion, compensation, disciplinary, or termination decisions.
Champions may see individual engagement in their organization and can export engagement CSV that includes work email. Prefer aggregate views for leadership conversations. Employers should tell employees how FluencyRank data will be used.
Subprocessors
Active vendors that help us operate the product:
| Vendor | Purpose |
|---|---|
| Vercel | Application hosting; optional Web Analytics / Speed Insights (cookie consent) |
| Supabase | Database and authentication |
| PostHog (EU) | Optional product analytics (cookie consent) |
| Sentry (EU) | Error monitoring |
| Resend | Transactional and notification email |
Confirm cloud region details with your FluencyRank contact when required for procurement. Optional rate limiting may use Upstash when configured.
Data retention & deletion
We retain account, organization, and training activity data to operate the service and readiness reports. Champions can soft-remove members from active access; full erasure is handled on request and may be limited by provider backups. We do not publish fixed deletion SLAs for the pilot without a reviewed DPA.
Privacy or deletion requests: privacy@fluencyrank.com.
FAQ for B2B customers
- Are you SOC 2 or ISO certified?
- No. We document controls and readiness honestly and do not claim certifications we have not earned.
- Is FluencyRank for performance management?
- No. It is a training and readiness platform. Scores should not be the sole basis for employment decisions.
- Do you use employee data to train public AI models?
- We do not send employee challenge answers to a production LLM today. Authored challenges are scored in our application. If AI feedback is enabled later, we will document providers and keep outputs advisory.
- Can we get a DPA?
- Yes — available for B2B pilots upon request and legal review.
- Where is data hosted?
- Application on Vercel; database and auth on Supabase. Confirm the current database region with your FluencyRank contact if your procurement requires a named region.