A chain of trust, on three levels.
HR departments, DPOs and security teams often ask us the same questions. Here, in full transparency, is what falls to Practicio, to our hosting providers, and to the frameworks we apply.
Your employees' data is never used to train an AI model. The platform is hosted in France.
What Practicio holds
Audits and documents in our name, which we stand behind.
What our hosting providers certify
AWS Paris and Microsoft Azure France Central.
The frameworks we apply
Standards we follow, not certifications we hold.
The second-level certifications are those of our hosting providers. Practicio applies ISO 27001 and 27701 good practice without holding the certification.
Last updated: 29 September 2026
Who is responsible for employee data?
The processing of data relating to employees who train on the platform is governed by the contract signed with their employer.
What do we provide to your IT department and DPO?
For each project, we provide our Security Assurance Plan, the privacy impact assessment (PIA) and our data breach notification procedure. These documents cover in particular:
- platform hosting and its location;
- the handling of simulation recordings (voice, transcripts) and their retention periods;
- access management: authentication, SSO and roles (employee, manager, HR);
- encryption measures and the business continuity plan;
- the list of sub-processors, including AI model providers and their location.
A question from your security team?
Write to us at contact@practicio.fr: we will send you the full documentation as part of your project.