Two things we protect like the business depends on it. Because it does.
Practice is private. That's why it works.
Transcripts are never shown to employers
Not to HR, not to program managers, not to facilitators. Organizations see scores, trends, and mastery signals — never words.
Every access is audit-logged
The boundary is enforced in the architecture and inspectable — not a paragraph in a policy.
Learners see everything about themselves
Their scores, their evidence, their trajectory. It's their development.
Your method stays yours. There is no ours.
Your materials stay yours
Encoded scenarios, rubrics, and coach language are scoped to your organization and the clients you designate.
We don't train AI models on your data
Not on your curriculum, not on your learners' conversations. Processing runs your sessions and scores them — that's it.
No house curriculum
We're not accumulating your method into ours. NextPass ships empty on purpose.
We store the minimum, on serious infrastructure.
Development data, not personnel records
Scores against your rubrics, session metadata, and the feedback shown to the learner. NextPass makes no hiring, promotion, or termination decisions — and isn't built to.
Established providers
Voice, hosting, database, and scoring run on established infrastructure providers whose platforms carry SOC 2 / HIPAA compliance attestations. (Their attestations — we don't claim our own certification.)
Enterprise SSO
Available for enterprise rollouts, so access rides on your identity provider.
The questions your security team will ask anyway.
Data flows, subprocessors, retention, deletion — we’d rather walk your IT and security stakeholders through it directly.