Security & Compliance Assurance
Resso maintains a maturing security program aligned with recognized frameworks (NIST CSF, CIS Controls), with documented policies, controls, and due‑diligence materials available to customers.
Trust Center
Resso is committed to protecting student and user data. We support the privacy, security, and compliance needs of the schools, boards, and organizations we serve with industry-recognized controls and practices.
Compliance
K‑12 Vetted & Cleared as Non‑Risk (Ontario)
Resso.ai has been formally reviewed through Ontario's education‑sector privacy and security vetting process and is cleared as safe, non‑risk software for use by publicly funded school boards. Deployments are governed by our Education/Institutional terms and data‑handling commitments, and student data is hosted in Microsoft Azure Canada regions by default. IT teams can confirm our clearance status directly through the provincial vetting directory.
Canadian Data Residency
Education data hosted in Microsoft Azure Canada regions by default.
Framework Aligned
Controls designed with reference to the NIST Cybersecurity Framework and CIS Controls.
Subprocessors
Microsoft Azure · plus a limited set of vetted service providers. Contact for Subprocessor List.
Security Overview
Comprehensive safeguards designed to protect your data and support compliance requirements.
Data Protection & Encryption
Customer data is protected using encryption in transit (TLS) and at rest (Azure‑managed and applicable storage/database encryption) to help prevent unauthorized access.
Identity & Access Management
Role‑based access controls, least‑privilege access, and multi‑factor authentication for administrative access ensure users only have access appropriate to their role. SSO supported via Microsoft Entra ID and Google.
Audit Trails & Monitoring
Key system and security‑relevant activities are logged to support monitoring, accountability, troubleshooting, and incident investigation.
Secure Software Development
Separate development, staging, and production environments with code review, testing, approvals, and restricted production access reduce risk across the software lifecycle.
Data Minimization & Retention
We process only what's needed to run the service, and support minimal‑retention and program‑based retention options with export and deletion handled per the institution's agreement.
Recordings Off by Default
Audio and video are not stored by default. Content is saved only when a user or institution intentionally selects a save/share feature, such as sharing an interview with an employer.
Responsible AI
Purpose‑driven practice scenarios with guardrails and human oversight. Institution data is not used to train AI models by default.
Transparency & Due Diligence
Security documentation and supporting materials may be shared with customers and prospects on request, subject to a confidentiality agreement. Direct security or compliance questions to our trust team.
SAFE FOR SCHOOLS and students
Privacy Commitments for Students
No selling or renting of student personal information
No targeted advertising or ad‑tech in the education app
No marketing to students
No tracking of browsing, search, or social media activity outside the service
No GPS location collection
No AI model training on institution data
Students and educators retain ownership of their content
Frequently Asked Questions
How secure is Resso?
Security is a core focus. We follow industry‑recognized security and privacy practices designed to protect user data and support institutional and regulatory requirements, with encryption, MFA, access controls, monitoring, and a documented incident‑response process.
Is Resso approved for K‑12 use in Ontario?
Resso has been reviewed through Ontario's education privacy and security vetting process and is cleared as safe, non‑risk software for publicly funded school boards. Each board still completes its own review and approval.
Where is education data stored?
In Microsoft Azure Canada regions by default, unless otherwise agreed in writing.
Is Resso SOC 2 certified?
Not currently. We maintain documented privacy and security controls and can provide due‑diligence information; if certification becomes a contractual requirement, we'll discuss the appropriate assurance path.
Does Resso use customer or student data to train AI models?
Not by default. Institution data is not used for model training unless expressly documented and agreed in writing.
Are practice sessions recorded?
Audio and video are not stored by default — only when a user or institution intentionally selects a save/share feature.
Who owns content created in Resso?
Students, educators, and customers retain ownership, subject to institutional policies.
Can Resso complete our security questionnaire?
Yes. Send your questionnaire, deadline, and procurement context to our team.
How long has Resso.ai been serving schools?
Resso is deployed board‑wide in Ontario, including 20,000+ students at the Halton District School Board, and integrates easily into Brightspace.
Have a question about security or compliance?
We're happy to help. Reach our trust team for security documentation, procurement support, or a security‑questionnaire review.
Case Study
What Schools Are Saying
Halton District School Board using conversational training to boost student confidence and articulation. Students practice job interviews, co-op exit interviews, presentations, language, discuss book reports, assignments, subject discussions.
THE FUTURE OF COMMUNICATION TRAINING
Practice. Improve. Succeed.
Resso helps people build confidence through realistic conversations, actionable feedback, and measurable growth.
