Security posture
Our security principles—least privilege, defense in depth, auditability—and how compliance works at our stage.
Security & compliance →Trust & Security
Trust & security at Remu.
Remu Technologies works with sensitive information—student and wellbeing data in education, and unpublished creative work from authors. This page brings together how we approach security, privacy, responsible AI, and compliance, and how to reach us for security reviews and RFPs.
Security & governance
Privacy & data governance
How we minimize, protect, and respect the data entrusted to us, including student and author content.
Privacy & data governance →Responsible AI
Our principles for accountable, human-supervised AI across the portfolio.
Responsible AI →Regulatory readiness
How we design toward FERPA, health-adjacent, and other applicable frameworks.
Regulatory readiness →Policies
- Privacy Policy — how we collect, use, and protect information.
- Terms of Use — the terms governing use of our services.
- Accessibility (ADA) — our commitment to accessible experiences.
- AI & Governance — our full governance section.
Infrastructure & subprocessors
We build on established cloud, data, and AI infrastructure. We rely on providers that maintain their own independent security certifications (including SOC 2) and select them for alignment with our security and data-protection expectations. A current list of the subprocessors and infrastructure providers involved in delivering our services is available to qualified partners on request.
We have not, at this time, completed our own company-level SOC 2 or equivalent third-party audit; formal certification is part of our roadmap. See how compliance works here.
Data protection commitments
- Student & wellbeing data. Handled in line with the confidentiality principles of FERPA- and HIPAA-governed environments, under institutional governance.
- Author & manuscript content. Authors retain ownership; content is not used to train AI models and is processed only to deliver the service requested.
- Data minimization & limited retention. We collect only what a task requires and limit how long sensitive data is retained.
RFPs & security reviews
We welcome security questionnaires, vendor assessments, and RFPs from schools, districts, and partners evaluating Remu. We aim to respond directly and candidly, and can provide additional detail—including infrastructure specifics and documentation—to qualified partners under appropriate terms.
Security and compliance inquiries: contact form
Report a security concern: contact form