Data Security and Privacy

Last reviewed by BenchVoice: 27 May 2026. We may refresh this page as the service changes.

What data BenchVoice handles

• Voice recordings from researchers
• Transcribed text from those recordings
• Structured experimental data extracted from transcripts (protocols, reagents, conditions, observations)
• Account information (email, name)

Where data lives

• Audio files: a private Supabase Storage bucket with row-level security.
• Transcripts and structured data: a Supabase Postgres database, accessible only to the user who created the entry, enforced by row-level security.
• User accounts: Supabase Auth.
• Temporary file links: links to your files are temporary. Audio links expire in 7 days, and image and file links are shorter, one hour or less.

Third-party AI services (verified 27 May 2026)

BenchVoice sends audio to OpenAI for speech transcription and text to Anthropic for language understanding.

• OpenAI: data retention is disabled, and OpenAI does not train on API customer data.
• Anthropic: inputs and outputs are retained for 30 days for abuse monitoring, then deleted. Anthropic does not train on API customer data, and no optional feedback or training program (including the Development Partner Program) is enabled on our account.

PubMed (NCBI)

When BenchVoice suggests related papers for an entry, it sends that entry's experiment name and its non-generic reagent names to NCBI's PubMed search. It does not send transcripts, quantities, results, images, or protocol text. You can turn related-paper suggestions off in Settings. When off, nothing is sent to PubMed.

Usage analytics

BenchVoice uses PostHog to measure how the app is used, which pages are visited and whether actions succeed, never your research. Session replay masks all on-screen text and blocks all images, and recording is turned off entirely on pages that show your research (recording, entries, structured logs, animal-room sessions, projects, and protocols). The text of anything you click is stripped before it leaves your browser. Before you sign in you are anonymous. After sign-in, usage is linked to your account to measure real use.

What BenchVoice does not do

• Does not sell your data
• Does not use your data to train AI models
• Does not share data between accounts
• Does not allow staff to read individual entries except for support you request

Your rights

• View all your own data in the app
• Delete entries at any time. Soft-deleted entries are permanently removed after 30 days.
• Export your data
• Request full account deletion at benchvoice@benchvoice.ai

Compliance posture

BenchVoice is not currently HIPAA or SOC 2 certified. Do not store Protected Health Information. If used in academic instruction, FERPA may apply, so consult your institution.