Security at Condens

Condens stores and processes your research data in the EU or the US, depending on the hosting region you choose. You pick the region when you create your account, and Condens AI processes your data in that same region. Condens is a German company, so your data is handled under EU privacy law whichever region you choose.

No, Condens does not use your research data to train AI models or improve AI services. Condens AI runs on Microsoft Azure, Google Cloud, and AWS, and your data is processed in the hosting region you chose. Admins can turn off generative AI features for their workspace.

Yes, Condens is SOC 2 Type 2 certified and supports compliance with GDPR, CCPA, HIPAA, and the Australian Privacy Act. The SOC 2 report is available on request. HIPAA support and single sign-on (SSO) are add-ons on the Business plan and are included with Enterprise.

You decide who can access your research in Condens. User roles and project permissions let you limit access to raw data such as recordings and transcripts, and give stakeholders read-only access to shared insights. Condens employees access customer data only with your written consent and only when they need it to resolve an issue.

Condens encrypts data in transit with TLS and at rest with AES-256, and creates encrypted backups every day. You can restore deleted data for the first 30 days. After that, it may stay in backups for another 30 days before it is permanently deleted. If you delete your account, your data is permanently removed from Condens systems once that backup period ends.

Yes, Condens lets you anonymize participant data before you share research. The Business plan includes video blurring. Enterprise adds automated face and name blurring, voice anonymization, and PII redaction across video, audio, and text. On top of that, you can hide participant names when you share findings.

Yes, on the Enterprise plan, you can set a custom retention period so Condens deletes audio and video recordings automatically. Admins get a notification before files are deleted. On every plan, you can delete personal data manually at any time.

Yes, Condens provides a Data Processing Agreement (DPA) and shares its SOC 2 report on request. For Business and Enterprise customers, the Condens team also answers custom security questionnaires. Enterprise customers can arrange tailored contract terms and service level agreements (SLAs).