Controller and processor roles
When a customer organisation uses Evolve to train its workforce, the organisation generally acts as the controller of its employees' and participants' personal information — it decides who is trained, why, and how results are used. Evolve Simulationsgenerally acts as the processor, handling that information to provide the platform and following the organisation's instructions under our agreement.
For our own website visitors and for our direct customer-account relationships (such as billing contacts), we act as a controller. Our handling of personal information in that capacity is described in our Privacy Policy.
What we process on a customer's behalf
- Account, team and role data for the customer's users.
- Simulation content, transcripts, scores and AI-generated feedback.
- Learning activity events (xAPI-style) reflecting training progress.
- Usage and billing records associated with the customer's subscription.
Our commitments as processor
- Process customer data to provide the service and as instructed under the agreement.
- Apply the security controls described on our Security & Trust page, including row-level security and role-based access.
- Use only the subprocessors listed on our Subprocessors page, under appropriate obligations.
- Assist the customer, as reasonable, with data subject requests and with security and breach obligations.
- Return or delete customer data on termination, in line with the agreement and subject to legal retention and backup cycles.
Customer responsibilities
- Establish a lawful basis for processing employee and participant data, and provide any required notices or consents.
- Configure roles, assignments and access appropriately within the platform.
- Use simulation results responsibly, with human review for any significant people decisions.
Getting a DPA
A Data Processing Agreement is available on request and is typically included as part of an enterprise agreement. To request a DPA or discuss specific data-protection requirements, contact privacy@evolvesimulations.com. Where your organisation has a signed agreement with us, that agreement and its DPA terms take precedence over this overview.