How we protect your records
Prodigy Suite holds personnel records: signed policies, training, time off, incident reports and letters. Here’s how they’re kept safe, and who can see what.
No passwords to steal
Owners and employees sign in with a link we email to them, so there are no passwords to guess, reuse or leak. A sign-in lasts on that device until they sign out.
Each person sees only their own
An employee’s page opens only after they sign in with the email address their employer has for them, and shows only their own policies, training, time off and letters. Each business sees only its own records.
Stored in Canada
Company records and uploaded files are stored in Google Cloud’s Toronto region. Information is encrypted in transit (HTTPS) and at rest.
No direct database access
The database can’t be read or written from a web browser. Every request goes through our server, which checks who is signed in and what they’re allowed to see.
Records that can’t be quietly changed
A signed acknowledgment is written once and can’t be signed again or edited. It keeps a fingerprint (SHA-256) of the exact text, so anyone can show the policy hasn’t changed since.
Card details never touch us
Payments are handled by Stripe. We never see or store card numbers.
Files and documents
- Uploaded files are kept in a private storage bucket. HR files (contracts, certificates) are shown only to the owner. Training files, safety data sheets and an employee’s own incident photos are also shown to the employees they’re meant for, through links that expire after 24 hours.
- A handbook uploaded to the free audit is read in memory to make the report and is never saved as a file.
AI features
Policy drafting, handbook reviews, course drafting and Ask Prodigy use Anthropic’s Claude. Under its commercial terms, Anthropic doesn’t use this content to train its models. We send only what each feature needs. The privacy policy lists every provider and what it processes.
Who at Gintii AI can access your data
Access is limited to the Gintii AI staff who need it to run and support the service. We don’t sell personal information.
If something goes wrong
If a breach of security creates a real risk of significant harm, we’ll notify you and the Privacy Commissioner of Canada, as the law requires.
Report a security issue
If you think you’ve found a security problem, email hello@prodigysuite.co with the subject “Security”. It reaches the people who build Prodigy Suite.
Last updated October 15, 2026 · Gintii AI Inc., Ontario, Canada