GDPR and Data Handling

Data privacy and GDPR compliance are foundational to how TeamBench handles your information. As a platform that processes business content, we understand that the text you submit for review may contain sensitive business information, and we treat it with appropriate care.

TeamBench processes your content solely for the purpose of providing the service you requested -- content review, chat interactions, and Auto-Improve suggestions. Your content is not used to train AI models, not shared with other users or organizations, and not used for any purpose beyond delivering your review results. This is a fundamental architectural principle, not just a policy statement.

When content is submitted for review, it is sent to the selected AI provider (OpenAI, Anthropic, or Google) via their API. These providers have their own data processing agreements and policies. Importantly, API usage through TeamBench typically falls under the providers' business API terms, which generally prohibit using API input data for model training. We recommend reviewing each provider's data processing terms for your own compliance requirements.

Data is encrypted in transit using TLS and at rest using industry-standard encryption. Your content, review results, and account data are stored on secured infrastructure. Access to production data is restricted to authorized personnel and logged for audit purposes.

Your organization's data is isolated from other organizations through TeamBench's multi-tenant architecture. Each organization's data is scoped and accessed only through authenticated requests from that organization's members. There is no data leakage between organizations.

Under GDPR, you have specific rights regarding your personal data: the right to access your data, the right to rectification, the right to erasure (right to be forgotten), the right to data portability, and the right to object to processing. TeamBench supports these rights. You can export your data, request corrections, and request deletion of your account and associated data.

If you are processing personal data through TeamBench -- for example, reviewing content that contains customer names, email addresses, or other personal information -- you are the data controller for that personal data, and TeamBench is the data processor. We process that data only according to your instructions (i.e., performing the review you requested) and do not independently determine the purpose of processing.

For organizations with specific compliance requirements, such as Data Processing Agreements (DPAs), Standard Contractual Clauses, or specific data residency requirements, contact the TeamBench team. We can discuss your specific needs and provide the appropriate documentation and assurances for your compliance framework.