Trust and security
Typewiser holds unpublished research and proposals before they are submitted. Here is what happens to them.
- EU
- Your documents are stored on AWS in EU regions.
- Never
- used to train an AI model, ours or anyone else’s.
- GDPR
- A Spanish company working under EU data protection law.
- ISO 27001
- Controls aligned to the standard, with certification in progress.
Your work
Your work belongs to you
-
Your work stays yours
The proposals and text you produce in Typewiser belong to you. You can export them at any time, in Word or PDF, and take them wherever you like. Our rights stay with the platform and the templates.
-
It is never used to train AI
Nothing you upload trains an AI model, ours or anyone else’s. We do not mine it for statistics or product research either.
-
You can take it away
Your projects stay available while your account is active. Close the account and you have six months to export everything, after which it is deleted. A free account that goes unused for six months is treated the same way, so export your work if you plan to leave it for a while. You can ask us to delete your data sooner at any time.
Where it lives
Held in the EU, under EU law
-
Where it is held
Your documents, your proposals and everything you write are stored on AWS in EU regions.
-
Who is responsible for it
We are a Spanish company and we work under GDPR. For the documents and proposals you put into Typewiser, we act as your data processor. For your account and billing details we are the controller, and our privacy policy explains what we do with them.
Who can see it
Very few people, and only when needed
-
Very few people can see it
A small number of authorised staff can reach account details and usage figures, for support and billing. They are named individuals with multi factor authentication, under written confidentiality obligations, and every administrative action is logged. Usage records show that a query happened, not what it said.
-
Who else is involved
Typewiser uses the large language models of established providers to draft and review, and a speech to text service if you use voice interactions. Your spoken answers are transcribed and the audio is never stored. When you use literature search, your query and the filters you choose go to scientific search providers, and nothing from your Knowledge Library is sent with them. Payments are handled by Stripe. Each provider is contracted to process your content only for the task you asked for, and never to train on it. The full list is in our privacy policy.
How it is protected
Protected at every step
-
Security
We encrypt data in transit, restrict access on the principle of least privilege, require multi factor authentication for administrative accounts, log administrative actions, and keep backups with point in time recovery. AWS, who host the platform, hold ISO 27001 and SOC 2 for the infrastructure we run on. We are working towards ISO 27001 certification ourselves.
-
If something goes wrong
We have a documented procedure for security incidents and we will tell you without undue delay if one affects your data.
-
Certification
We apply controls aligned to ISO 27001 and are working towards formal certification. AWS, who hosts the platform, holds ISO 27001 and SOC 2 for the infrastructure we run on.
For institutions
For research offices and procurement
If you are assessing Typewiser on behalf of an institution, we can provide you with a data processing agreement, our privacy policy and a security statement. If your institution has its own processing agreement or specific requirements, send them over and we will go through them with you.
Talk to us about an institutional review