ELVINA · SECURITY
Security and approvals: what I can touch, who signs off
I work only with the sources, tools and actions you agree to. A person on your team approves anything before it reaches your people, and nothing changes in your systems without a yes. Hosting, subprocessors and retention are confirmed in writing in a security review, not on a website.
Only the sources and tools you agree to. Nothing reaches your people or changes in your systems without a yes.
A free 30-minute demo on Zoom. The people behind me show you how I'd handle your goal and agree on the next step with you. See pricing
- Goal
- Sample
- Offer
- Account
- Payment
I'm Elvina. What would you like to check before you share any files?
Prefer a person? Book a free demo with my team
Tell me what you need, or attach a file.
Nothing reaches your team until you approve it.
- Only what you approve
- A person signs off
- Written answers in a review
Updated
Three gates between a document and your team
NIST's glossary defines least privilege as a principle that a system should restrict the access privileges of users, or processes acting for them, to the minimum necessary to accomplish assigned tasks.
- 1
Your source owner
Approves each document I may use. Nothing else is read.
- 2
A reviewer on your team
Approves each draft. A rejected draft stays unpublished until your reviewer approves a new version.
- 3
Your manager
Assigns approved training to people, by role and location.
What I never do
- Read folders nobody approved
- Change anything in your systems without your yes
- Send, post or book anything you haven't approved
- Put personal data about your staff or passwords into training
How your materials are used
Your materials are used to build your training. Model-training terms depend on your plan and applicable agreement. See the ContentBuilder Privacy Policy and your workspace agreement for data use, service providers and available opt-out choices; the chat on this site follows this site's Privacy Policy. Data is encrypted in transit.
Every lesson shows where it came from
Open any lesson, quiz or job aid and you see the source document, its owner and the version it came from. When a source changes, send me the revision, and I redraft the lessons built on it for review before your people see them. Flagging those lessons automatically is planned, not available today.
Questions to bring, and where the answers live
Ask for written answers on
- Where your data is hosted, and whether the agreement can confirm the region
- Which subprocessors touch your content, and how you hear about changes
- How long sources, materials and learner records are kept, and how they are deleted
- Who on your side can export learner results, and how access ends when someone leaves
For larger teams
Single sign-on (SAML), SCIM provisioning, granular roles and an audit log come with the Enterprise plan.
No security certification is claimed on this site. Certifications, audit reports and hosting are confirmed in the security review and the signed agreement.
Book a demo with my teamWhat working with me takes
The list of what you want checked, and one folder or file to start from once you are comfortable.
Written answers from our team, then a source list you approve before I read anything.
We agree up front how much of your time the interview and approvals take, and what else you and your managers do.
I prepare the materials. My team sets me up, supports your account and runs your demo. A person confirms every meeting and every payment.
| Source | Front desk procedure |
| Owner | Dana, practice manager |
| Version | 3, approved Feb 3 |
| Reviewer | Sam, office manager |
| Used in | 2 lessons, 1 quiz, 1 job aid |
Questions about approvals and access
Who approves what an AI employee may read?
Your source owner approves each document I may use, and nothing else is read. A reviewer on your team approves each draft, and your manager assigns approved training to people by role and location.
Can an AI employee change anything in our systems on its own?
No. Nothing changes in your systems without your yes, and I don't send, post or book anything you haven't approved. Folders nobody approved stay unread.
What should we ask in a security review of an AI training tool?
Ask for written answers on where your data is hosted, which subprocessors touch your content, how long sources, materials and learner records are kept and how they are deleted, and how access ends when someone leaves. Certifications, audit reports and hosting are confirmed in the security review and the signed agreement, not on this site.
Sources
Public sources, checked on the date shown.
NIST's glossary entry for least privilege (from CNSSI 4009-2022 and NIST SP 800-12 Rev. 1): “A security principle that a system should restrict the access privileges of users (or processes acting on behalf of users) to the minimum necessary to accomplish assigned tasks.” Source: NIST Computer Security Resource Center, Glossary: least privilege (checked 2026-10-26).
BEFORE YOU SHARE A FILE
Tell me what you need to check. Our team answers in writing.
A free 30-minute demo on Zoom. The people behind me show you how I'd handle your goal and agree on the next step with you.
No launch date is committed for planned features.