Security
Security & data protection
Where your account data is stored
Account details, case data, session transcripts and feedback are stored in a MongoDB Atlas database operated for Prosomio. Passwords are hashed with bcrypt before storage; we never store them in plain text.
Session recordings
When you complete a voice or dialogue session, the audio recording is uploaded directly from your browser to Google Cloud Storage (GCS) using a short-lived signed upload link. Recordings are later accessed through time-limited signed links rather than public URLs.
AI processing
Live voice simulations are powered by xAI’s realtime voice API. Your browser connects to xAI using a short-lived token issued by our server; our xAI API key stays on our servers and is never sent to your browser. Transcripts are processed by our AI provider to generate structured feedback. Depending on configuration, some text and feedback processing may use OpenAI instead of xAI.
Session limits
Voice simulations are capped at 12 minutes. The connection to the AI provider is closed when a session ends, when you leave the page, or when the cap is reached.
Payments
Payments are handled by Stripe. Prosomio does not see or store your full card details.