Your conversations stay private.
Not your manager, not your People Team, not anyone at Humanising.
Privacy and safety
Private by design, not by promise.
People only open up if they trust where their words go. So we built privacy into Shaping from the first line of code, rather than adding it at the end.
Private conversations
Your words stay yours.
Your People Team only sees groups.
Insights only ever cover groups of eight or more. Smaller groups are never shown, and comparing groups can't be used to single anyone out.
You always know you're talking to AI.
Shaping never pretends to be a person.
Never used to train AI models.
Conversations are used only to help the person having them.
Built to keep data safe
Locked down, twice over.
Stored in the UK.
Shaping's database and app both run in London.
Encrypted twice.
Conversations, notes and documents are encrypted with AES-256 by Shaping itself before they're stored, on top of the encryption our hosting provides. Someone who got into the database would see only scrambled text.
Two-step sign-in.
Anyone who can see company-wide information, such as the People Team, must use two-factor authentication (a code from an app on their phone) every time.
Less goes to the AI.
When Shaping thinks with you, the AI sees your first name and job title, never your surname or your organisation's name. Email addresses are removed first, too.
Companies kept apart.
Each organisation's data is walled off from every other's, and automated tests check that wall on every change we make.
Uploads checked for hidden instructions.
Documents people add, such as a 360 report, are checked for hidden text, and Shaping treats what's in them as information, never as instructions.
GDPR built in
Only what's needed, only as long as it's needed.
Deleted automatically.
When someone leaves, their conversations and content are deleted automatically after 12 months, and their account is fully erased after 7 years.
Right to be forgotten, on request.
If someone asks to be erased, everything is deleted straight away, and we keep a record that it was done.
Suggestions checked before anyone sees them.
People Team insights are written from group totals only, then checked automatically for anything that could identify a person or judge an individual. Anything that fails is never shown.
Told up front.
Everyone sees a plain-English note on privacy, and its one exception below, before their first conversation.
Safety
A mentor, not a therapist.
If something serious comes up, Shaping pauses and points the person to the right human support. If their wellbeing may be at immediate risk, it tells them plainly to contact Samaritans and, in an emergency, 999.
It also alerts a named safety contact at their organisation, by email or text message, so someone can check in with them. The alert carries the person's name and the time, never what they said. A second, separate check confirms the risk first, and the person is told in the conversation when an alert has gone.
Everyday stress, a bad day or low mood never trigger it.
999in an emergency
116 123Samaritans, free, any time
Questions from your IT or data team?
We have a security and data protection pack ready for them. Book a call, or ask for the pack, and we'll go through anything they need.