Hosted in Canada
The LeaderSync application and its database run on Amazon Web Services in the Canada (Central) region, ca‑central‑1.
Security
Your leadership conversations, handled with care
LeaderSync holds the numbers, plans and people notes your leadership team works with every week. Here’s how we look after them, in plain language.
Encrypted
Traffic uses TLS, including between our servers and the database. The database and its backups are encrypted at rest, and connection secrets get an extra layer of encryption with a key unique to your company.
Isolated per company
Every record belongs to exactly one company, and every query is scoped to it. Your agent’s tools only work inside your company’s data.
Yours to take or delete
Export your whole operating system as plain files whenever you like. Ask us to delete your workspace and we will.
The details
How it works under the hood
The plain-language version of what we do with your data, and who else is involved.
Hosting
Application servers and the PostgreSQL database run in AWS ca‑central‑1 (Montréal) on a private network. The database is encrypted at rest and runs across two availability zones. Automated backups are kept for 30 days in the same region.
Sign-in and access
People sign in with their Microsoft work account or a one-time link sent to their work email — there are no LeaderSync passwords to leak. Within a company, owners and admins decide who has access to the web app.
Confidential records
Quarterly Check-ins and Fit Reviews about individual people are confidential. Only owners, admins and that person’s manager can see them, and the agent never posts them to the team.
Your own agent
Each company has its own agent memory and its own access token. The token only reaches that company’s data, and it’s stored only as a one-way hash on our side.
AI processing
Your agent runs on Claude, from Anthropic. We send Anthropic what the agent needs to do its job. LeaderSync doesn’t train AI models on your data, and Anthropic doesn’t train on data sent through its commercial API.
Meeting notetaker
The notetaker, provided by Recall.ai, joins only the meetings you set up and shows as a visible participant. The transcript is stored in your workspace and turned into action items, issues and updates.
Email to and from your agent goes through Postmark. Replies are only accepted from active people in your company; everything else is ignored.
Billing
Payments are handled by Stripe. We never see or store full card numbers.
Subprocessors
Who else touches your data, and why
We use a small number of trusted providers to run LeaderSync. Some process data outside Canada, mainly in the United States. We’ll update this list before adding a new subprocessor.
| Provider | What they do for LeaderSync | Where |
|---|---|---|
| Amazon Web Services | Application hosting and database | Canada (ca-central-1) |
| Anthropic | AI processing (Claude) for your agent | United States |
| Recall.ai | Meeting notetaker: recording and transcription | United States |
| Postmark | Sending and receiving email | United States |
| Stripe | Billing and payments | United States |
| Microsoft | Sign-in, team directory, calendars and Microsoft Teams | Per your Microsoft 365 tenant |
Your data
Export it any time. Delete it when you’re done.
Your operating system — Vision Plan, Seat Map, priorities, numbers, meetings, issues and action items — exports as a zip of plain Markdown files you can open in any editor.
When you leave, ask us to delete your workspace. We’ll confirm once it’s gone. See our Privacy Policy for retention details.
Report a security concern
Found something that doesn’t look right? Email support@leadersync.ai with “Security” in the subject. A person will read it and reply.
Need a security questionnaire or data-processing terms for your procurement team? Talk to us.
Build a leadership team that runs the business with you.
Set up in about fifteen minutes. Your coach starts with next Monday’s numbers — and your team starts owning the results.
