Yours, isolated,
never training data.

Who operates Airprose

Airprose is operated by (trading as Airprose), registered in England & Wales, company no. , registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Security and privacy questions: privacy@airprose.com.

Where your data lives

Your documents and drafted answers are stored in the UK. The application is served globally through our hosting and content-delivery provider, so the app itself may run in other regions, but your stored data stays in the UK. Product analytics (PostHog, hosted in the United States with UK IDTA / EU SCC safeguards) use a first-party browser identifier (localStorage, not a cookie), and only run with your consent.

Tenant isolation

Every organisation's data is isolated at the database level using row-level security on every table. There are no cross-tenant joins in any service path, so one customer can never see another's content.

AI and your content

Airprose drafts only from the material you provide. Your content is used to generate your drafts and is not used to train shared AI models. Drafting uses a third-party AI provider under contract. We do not sell your data, and your content is never shared between customers.

Access and authentication

Access to your workspace is scoped to your organisation, with review and sign-off controls so answers only ship once a person approves them. Single sign-on (SSO / SAML) is available on the Scale and Enterprise plans. Customer-facing audit logs are on our roadmap.

Sub-processors

We use a small number of vendors to run the service. Where a vendor may process data outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.

Your data and your rights

Your content is yours. You can download the original files or delete your content at any time. To exercise data-protection rights (access, correction, deletion, objection, portability, or to withdraw analytics consent), email privacy@airprose.com and we respond within one month. See our Privacy Policy for the full detail.

Agreements and documents

• Customer Agreement
• Data Processing Agreement (DPA), available to all customers
• Privacy Policy, Website Terms and Cookie Policy

Certifications and roadmap

We would rather be plain than claim a badge we do not hold. SOC 2 and ISO 27001 are on our roadmap and are not held today. What is true right now: UK data storage, per-tenant isolation with row-level security, no use of your content to train shared models, and SSO / SAML on the higher tiers. Sign-off is per named signer: approvers authenticate as themselves, so an email link alone cannot approve an answer. Customer-facing audit logs and formal certifications are planned.

Reporting a security issue

If you believe you have found a security issue, please email privacy@airprose.com and we will respond promptly.