Security and privacy

Organisations trust SimDart with their people's learning and their own processes. This is how we keep it safe and apart.

Organisations are kept apart twice

Every query is limited to your organisation, and the database itself refuses to show or change another organisation's rows, even if a query forgot its limit.

Labs run in sandboxes

Each learner's lab runs in its own sandbox with its own kernel, on its own network, with no route to other labs, our servers or private networks, and no internet unless the lab needs it.

Encrypted and access-checked

Every connection uses HTTPS. Passwords are stored as Argon2 hashes. Files are served only after an access check, never from a public link.

Hosted in the European Union

The service, its database, files and backups are hosted in the EU.

Nightly backups

The database and files are backed up every night and kept for 14 days.

Access by role

Roles per organisation, mentors limited to their own mentees, and an audit log of publishing, enrolments and permission changes.

Your data, your decision

Owners can export everything as a file at any time, and deleting the organisation removes it for good. People can delete their own accounts.

AI only when you want it

AI is off on the trial and Starter, and can be switched off on any plan. When it is on, content goes to Anthropic, which does not use it to train its models, and every draft is reviewed by your team.

Fair to learners

Learners can see exactly what is recorded about them. Reading time can be switched off, and raw activity is deleted on a schedule you choose.

Report a vulnerability

If you find a security problem, write to support@simdart.com. We will reply quickly and keep you informed.