Lesson ConnectYour project knowledge stays yours
Lesson Connect is aligned with UK GDPR, registered with the ICO (ZC279338), and stores your data in the UK and EU.
UK and EU hosting
The app runs on Microsoft Azure in UK South. Your data is stored in Supabase in Paris, and AI runs on Microsoft Azure OpenAI in the EU.
Organisations kept apart
Every organisation is separate. Rules inside the database check every request against the user's own organisation, and this is tested on the live hosting.
Sign-in and access
Sign in with your Microsoft work account, so your MFA and access rules apply, or with email and two-step login. Accounts are by invitation only.
Encryption
HTTPS on every connection, and data, files and backups encrypted at rest.
AI safeguards
Only the text a task needs is sent to the AI. It is not used to train models, and results are limited to your own records.
Careful releases
Every change is tested on a separate system and by automated tests, including permission and isolation checks, before it is released.
Data protection
- You stay in control of your data; we process it only to provide the service
- Data processing agreement for every customer
- Export your lessons and reports at any time; your data is deleted after your subscription ends
- Breaches reported to you within 48 hours
Security documents
Our security overview covers where data is held, how organisations are kept apart and how incidents are handled. We are happy to complete your supplier security questionnaire.
Independent certification (Cyber Essentials) and penetration testing are planned as we onboard enterprise customers.
See the companies that process data for us.