tesse

Tesse holds personal data about the people your organisation supports, including names, diagnoses, behavioural notes, goals and photographs. This page sets out how that data is stored and processed.

Our role

Under Singapore’s Personal Data Protection Act (PDPA), your organisation is responsible for the personal data of the people it supports. Tesse acts as a data intermediary, processing that data only to provide the service and on your instructions. Tesse does not use it for its own purposes.

Hosting and storage

The application runs in Singapore on Vercel and Amazon Web Services. Records, notes, photographs and generated resources are stored in Singapore, in a Supabase database and Amazon S3. The only copies held elsewhere are short-lived ones kept by sub-processors: error reports, kept by Sentry for up to 90 days, and AI requests flagged for misuse review, described below.

AI processing

Generating a personalised resource sends the content of the request to an AI model operated by a third party. Tesse does not add the names of the people you support to these requests. Free text entered by staff is sent as written. All request content, including reference images, is treated as personal data.

AI providers do not use requests to train models. Text generation requests are subject to zero data retention. Google does not store image and speech generation requests, except that a request flagged by Google’s automated safety checks may be kept for up to 90 days for review of possible misuse, under Google’s terms.

AI processing takes place outside Singapore, in the locations below. Each AI provider is bound by a data processing agreement and has an independent SOC 2 audit report. Google Cloud and Amazon Web Services are also ISO 27001 certified. OpenRouter’s agreements with the providers it routes requests to are no less protective than its agreement with us.

“Global” means the provider may process the request in any region it operates in. Some models are only offered through the providers’ global routing. Global requests are covered by the same agreements and retention terms as the rest. Results are returned and stored in Singapore.

Sub-processors

This is the complete list of sub-processors that process personal data on our behalf. Each is engaged under a data processing agreement.

Access controls

• Staff access is limited to the people they are assigned to. Organisation administrators can access everyone their organisation supports. Removing a staff member from an organisation revokes their access immediately.
• Stored files, such as images and audio, are private. They are served to the application through links that expire after 15 minutes.
• Product analytics record feature usage by internal identifier only. Names, resource titles and search terms are not collected. Session recording is disabled.
• Error reports exclude request contents, search terms and interface labels. An error message may reference the data involved in the failed operation.
• Operational logs are retained for up to 30 days and then deleted.

Retention and deletion

Your organisation can download its resources at any time, and we provide a complete export within 30 days of a written request. Data you delete is removed from our live systems within 30 days, and backup copies expire within a further 30 days. When your organisation stops using Tesse, we delete its data within 30 days, after any export period it has asked for. Tesse does not sell personal data and does not use customer data to train models. Data about staff accounts is covered by our privacy policy.