Security & Privacy at LEADx

Last Updated: May 2026

At LEADx, trust is foundational to everything we do. Organizations trust us with leadership development, emotional intelligence assessments, coaching interactions, and employee learning experiences. We take that responsibility seriously.

This page provides an overview of how we protect customer data, secure our systems, and respect user privacy.

Our Commitment

LEADx is committed to:

  • Protecting customer and user information
  • Maintaining secure and reliable systems
  • Being transparent about our data practices
  • Limiting access to data on a need-to-know basis
  • Using artificial intelligence responsibly
  • Continuously improving our security controls

Privacy Principles


We Do Not Sell Personal Information

LEADx does not sell personal information to third parties.


We Collect Only What We Need

We collect information necessary to:

  • Deliver leadership development services
  • Provide assessments, coaching, and learning experiences
  • Manage customer accounts
  • Improve product performance and reliability
  • Respond to support requests
  • Meet legal and contractual obligations

Customer Data Ownership

For enterprise customers, customer organizations own and control the employee information they provide to LEADx.

LEADx processes customer information solely to deliver contracted services and support customer success.


User Rights

Individuals may request access to, correction of, or deletion of personal information where applicable under applicable privacy laws.

Requests may be submitted to:

support@leadx.org

Security Overview

Protecting customer information is a core business priority.

LEADx employs administrative, technical, and physical safeguards designed to protect customer information from unauthorized access, disclosure, alteration, or destruction.


Infrastructure Security

Security measures include:

  • Encrypted transmission of data
  • Secure cloud hosting infrastructure
  • Role-based access controls
  • Authentication and authorization controls
  • Activity monitoring and logging
  • Vendor security reviews
  • Security patching and software maintenance
  • Principle-of-least-privilege access management

Access Controls

Access to customer information is restricted to authorized personnel who require access to perform their job responsibilities.

Employees and contractors receive only the minimum level of access necessary to perform their duties.


Employee Responsibilities

Individuals with access to customer information are expected to:

  • Protect confidential information
  • Follow security policies and procedures
  • Use strong authentication practices
  • Report suspected security incidents promptly

AI Security and Data Protection

LEADx uses artificial intelligence technologies to enhance leadership development, coaching, and learning experiences.

When AI technologies are used:

  • Customer data is used only to provide services requested by customers.
  • LEADx does not use customer data to train third-party AI models.
  • LEADx evaluates AI providers for security, privacy, and reliability considerations.
  • Access to customer information remains governed by applicable customer agreements and privacy commitments.

We continuously review evolving AI technologies and update our practices as appropriate.

Data Retention

LEADx retains personal information only as long as necessary to:

  • Provide services to customers
  • Maintain business records
  • Fulfill contractual obligations
  • Comply with legal requirements
  • Resolve disputes
  • Enforce agreements

When information is no longer required, it is deleted or anonymized according to internal retention practices.

Service Providers and Subprocessors

LEADx works with trusted third-party service providers to operate and improve our services.

Key providers currently include:

Provider

Purpose

Amazon Web Services (AWS)

Cloud hosting and infrastructure

OpenAI

AI-powered functionality

Anthropic Claude

AI-powered functionality

HubSpot

CRM and customer communications

Stripe

Payment processing

Google Analytics

Website analytics and usage insights

These providers are contractually required to maintain appropriate safeguards for protecting customer information.

Security Assessments

LEADx periodically evaluates the effectiveness of its security controls.

Historically, LEADx has completed independent SOC 2 audits and third-party penetration testing assessments as part of its security program.

Security practices and controls are reviewed and updated over time to address evolving risks and business requirements.

Incident Response

LEADx maintains processes for identifying, investigating, and responding to potential security incidents.

If a security incident is determined to affect customer data, LEADx will notify affected customers as required by applicable law and contractual obligations.

Contact

Questions regarding security, privacy, or compliance may be directed to:

support@leadx.org

LEADx, Inc.