Security

Coaching conversations involve a level of personal disclosure that is unusual in professional contexts. People share in coaching sessions things they may not share elsewhere - aspirations that feel too ambitious to state publicly, patterns of behavior they find difficult to acknowledge, fears about their competence or character, and experiences that shape their present. The trust that makes this depth of disclosure possible is not incidental to the coaching relationship - it is its foundation. The software that coaches use to document, track, and support those relationships is part of the professional environment in which that trust must be maintained.

All data stored and processed through Exantur is held in the European Union. The platform operates in compliance with the General Data Protection Regulation (GDPR). Access controls are enforced at the database layer through row-level security - a user cannot access data they do not have explicit permission to see, regardless of how that access is attempted. Coach-private notes are never accessible to coachees. Organization data is isolated at the organization level. Multi-factor authentication is available for all users and required by default for platform administrators. No user data is sold, used for advertising purposes, or shared with third parties except as strictly required to provide the service.