Security

Last updated: September 27, 2026

Salalem runs on enterprise cloud infrastructure and handles personal data under GDPR and PDPL. What follows is what we can state plainly today; where a question needs a document rather than a paragraph, ask and we will send it.

Where Salalem runs

Salalem runs on Microsoft Azure. Your institution's environment is provisioned there rather than on hardware we maintain ourselves, which is what lets the platform inherit Azure's physical, network, and availability controls.

Where your data is stored

The platform runs on Microsoft Azure, and we confirm its region in writing before contracting. Files uploaded to the Service, such as evidence, identity documents, and reports, are held in Amazon S3 in Frankfurt, Germany. SCORM courses run on SCORM Cloud, which is served from the United States. If your regulator or your own policy requires a specific country, raise it during the evaluation.

Privacy and personal data

We process personal data in line with GDPR and PDPL: data is used to run the service you contracted, subject-rights requests are handled through your administrator, and we do not sell data or use your employees' learning records to train models.

Who can reach it

Access follows your own identity provider — Microsoft Active Directory or Entra ID, Google Workspace, or a provider you configure — so joiners and leavers are governed by the directory you already audit rather than by a second list inside Salalem.

How the AI assistant handles your content

The assistant runs on Salalem's own Azure OpenAI deployment. Each organization's documents are indexed separately, and every search is filtered to the organization that owns it. One outside service takes part by default: Cohere re-orders search results by relevance at the moment a question is asked. Web search is off unless your administrator turns it on; when it is on, search queries based on employees' questions go to public search engines. Salalem trains no models on your content.