// Trust & Security Report
Orpheus Technology Limited (ProWritingAid)
AI writing assistant / grammar, style and manuscript editing toolkit
Certifications held
3
Maturity
Growth
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on prowritingaid.com“We engage with third party auditors to assess our SOC 2 Security compliance. SOC 2 is an internationally recognized standard for managing customer data.”
Verify on prowritingaid.com“We regularly use specialist penetration testing companies (CREST approved) to test our whole platform, ensuring we discover and fix any security issues.”
Verify on prowritingaid.com“We comply with all applicable data protection laws, including the GDPR... All third-party providers have been verified as GDPR-compliant (Azure, Stripe, SendGrid, PayPal, Google, HotJar, Oribi, ShareASale, Microsoft Clarity, Iterable).”
> Show 2 unconfirmed / not-held certifications
source: prowritingaid.comNo mention of ISO 27001 found on the Trust Center, Privacy Policy, or GDPR pages.
source: prowritingaid.comNo managed bug-bounty platform referenced. GDPR page only states: 'Users and security researchers can submit security reports via this link.'
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Not stated
Data region
Primary processing in the United Kingdom; data stored on servers in the USA, with service providers also operating in the EEA and US. GDPR page: 'All ProWritingAid data is held on servers hosted outside of the EU in the USA.' Cross-border transfers covered by Standard Contractual Clauses (SCCs).
ProWritingAid explicitly states it does NOT train its models on customer text. 'When using ProWritingAid, your texts will not be used to improve the quality of our services. We use texts hand corrected by professional copyeditors to train our algorithms.' Grammar-checked text is deleted after processing; only documents a user explicitly saves in the Web Editor are retained (encrypted) in the cloud. Trust Center: 'Our writing suggestions use our unique Natural Language Processing models that never retain your text.'
// Security controls
Administrative access controls
Role-based permissions, multi-factor authentication for administrative access, logging and monitoring
prowritingaid.comPayment data handling
Card processing via Stripe and PayPal; full card numbers not stored (only last 4 digits)
prowritingaid.comBreach notification
Commits to notifying users within 24 hours maximum after a breach is reported and fixed
prowritingaid.com// Products & data scope
data: Pasted/uploaded text analyzed and discarded after processing; documents explicitly saved are encrypted and stored in the cloud.
Core consumer experience for individual writers.
data: Text segments transmitted to ProWritingAid cloud NLP service for analysis and returned; not retained.
Works inside the user's existing writing apps; same no-retention/no-training posture.
data: Adds billing/payment data (handled by Stripe/PayPal) on top of writing data.
Monthly, yearly and lifetime license options historically offered.
data: Business contact and configuration data collected for partners/customers; API exposes the same NLP analysis engine.
Limited public detail on a distinct enterprise data/compliance scope; warrants direct confirmation for B2B procurement.
// What to watch
- SOC 2 language is aspirational/in-progress ('engage with third party auditors to assess our SOC 2 Security compliance') rather than a confirmed report; no report date, scope, or attestation published. Treat as NOT a held certification.
- No ISO 27001 and no managed bug-bounty platform (HackerOne/Bugcrowd); only an ad-hoc security-report submission link.
- Strong, clear no-training and no-retention stance on customer text is a positive differentiator versus many competitors.
- Privacy Policy is current (last modified 04-Mar-2026) but the GDPR page is stale (last modified 28-Oct-2020), creating minor freshness inconsistency.
- Data stored in the US under SCCs; no customer-selectable data residency. DPA availability not documented publicly.
- Terms of Service URL inferred from site footer navigation, not directly fetched.
// At a glance
Pricing model
Freemium consumer SaaS (free tier plus paid Premium/Pro subscriptions and credits); team and API options available
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Orpheus Technology Limited (ProWritingAid)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-06-27. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
prowritingaid.com