Privacy policy — Sana Learn

Cited by

Facts read from this source

• Entity Report an error

  “We at Sana Labs AB, reg. no. 559060–6579, (“Sana,” "us," “we,” or "our")”

• Address Report an error

  “Sana Labs AB 559060–6579 Riddargatan 32, 114 57 Stockholm, Sweden”

• Notice updated Report an error

  “Last updated: 22 April 2026”

• Controller role Report an error

  “Sana is the data controller for the processing of your personal data other than when we act as a processor or service provider on behalf of a customer that is a company subscriber”

• Joint controller workday Report an error

  “Sana acts as a joint controller with Workday, Inc. and Workday Limited (collectively, “Workday”)”

• Joint controller workday services Report an error

  “specifically relating to integrated services and joint marketing campaigns regarding products, services and events from Workday”

• No AI training Report an error

  “We, or any of our third party service providers, do not use your personal data to train artificial intelligence and/or machine learning models.”

• Content review opt out Report an error

  “For Self-Serve Users in Sana Agents, which are not within the Civic Tier, we may review your Content to understand the use of our services and improve the user experience. You can opt out from this feature at any time within the Sana Agents platform. We do not review specific Content of Civic Tier Users or Users of Company Subscribers.”

• Automated decision making Report an error

  “We do not use processes for automatic decision-making.”

• Retention statistics Report an error

  “Personal data stored in order to create statistics, analysis, and business development will be retained as long as necessary to fulfill the purpose, but no longer than one year without anonymizing it.”

• Retention marketing Report an error

  “Personal data processed to contact you for marketing purposes will be stored for one year from the date when we collected your data or the date when we last used your data to contact you.”

• Retention fraud Report an error

  “We will store your personal data for the purposes to prevent fraud and other abuse as long as you are necessary to fulfill the purpose but no longer than one year.”

• Retention accounting Report an error

  “Personal data processed to fulfill legal obligations in the Accounting Act will be stored for seven years. Data processed to fulfill the Anti-Money Laundering Act will be stored for five to ten years depending on the circumstances.”

• Retention legal claims Report an error

  “The general limitation period is ten years under the Act on Limitations.”

• Marketing sources Report an error

  “LinkedIn Website Retargeting; Google Analytics (Google Ireland Limited); Google Workspace APIs (Google Ireland Limited); Google Tag Manager (Google Ireland Limited); G2 (G2.com), Clearbit (APIHub, Inc.), Bombora (Bombora, Inc.), Mutiny (Mutiny HQ Corporation), and Meta Ads conversion tracking (Meta pixel) (Meta Platforms Ireland Ltd).”

• No sale Report an error

  “We will not sell your personal data.”

• Region Report an error

  “Sana will process your personal data within the EU/EEA.”

• Transfers Report an error

  “However, we occasionally need to transfer personal data to third countries, either directly or through our sub-processors. If we engage in such transfer, we will ensure that there is a legal basis for the transfer and that the level of protection is equivalent to that applicable within the EU/EEA, either by ensuring that the country has an adequate level of protection, that we have taken adequate protective measures such as the European Commission’s standard contractual clauses”

• Rights deadline Report an error

  “We have an obligation to respond to your requests to exercise your rights within one month of receiving your request. If your request is complex or if we have received many requests, we have the right to extend this deadline to two more months.”

• Rights requests via workday Report an error

  “Workday manages privacy operations and data subject requests on behalf of Sana. Whether your request relates to services provided solely by Sana, or to our joint processing activities with Workday, please submit your request directly through Workday’s online form.”

• Data portability Report an error

  “This means the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that these data are transferred to another personal data controller.”

• Complaint authority Report an error

  “You have the right to lodge a complaint with the Swedish Data Protection Authority (Sw. Integritetsskyddsmyndigheten)”

• CCPA rights Report an error

  “If you are a resident of California, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).”

• CCPA no sale Report an error

  “Sana does not sell or share your personal information as those terms are defined under the CCPA/CPRA.”

• Children age Report an error

  “Our services are not directed to or intended for children under 18 years of age, other than the free services provided to Civic Tier users above the age of 13 years. Processing of personal data relating to children using our Civic Tier services is subject to our Children’s Privacy Policy.”

• Privacy contact email Report an error

  “we ask you to contact us at privacy@sanalabs.com”

• Data categories Report an error

  “Category Details User Name Email Username Password Alphanumeric identifier Access level and system role Profile picture Custom attributes from Subscriber’s pre-approved integrations”

• Content categories Report an error

  “In-meeting content: video, audio, images, chat, text, recordings, transcriptions, interactive card responses, files, calendar dates”

• Third party content Report an error

  “Third-party content: Content from user’s connected integrations”

• Free civic tier Report an error

  “a user that signed up for our services independently in our online purchasing portal or applied for our free services including the free services we offer within the Civic Tier”

• Cookie notice Report an error

  “We use cookies that may include personal data to improve, analyze and administer our websites and services and your experience of them. You can find more information about this in our Cookie Notice.”

• Breach notification Report an error

  “Should a security breach occur that may materially impact you or your personal data, e.g., risk of fraud or identity theft, we will contact you to explain what action you can take to mitigate potential adverse effects of the breach.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Compliance Officer Reporting, learner data & works council
• The Compliance Officer European sovereignty
• The Compliance Officer Pricing transparency
• The Customer Education Lead Reporting, learner data & works council
• The Customer Education Lead European sovereignty
• The Customer Education Lead Pricing transparency
• The IT & HR Systems Admin Reporting, learner data & works council
• The IT & HR Systems Admin European sovereignty
• The IT & HR Systems Admin Pricing transparency
• The Onboarding Lead Reporting, learner data & works council
• The Onboarding Lead European sovereignty
• The Onboarding Lead Pricing transparency
• The Skeptic Reporting, learner data & works council
• The Skeptic European sovereignty
• The Skeptic Pricing transparency
• The Works Council Member Courses, learning paths & content standards
• The Works Council Member Reporting, learner data & works council
• The Works Council Member European sovereignty
• The Works Council Member Pricing transparency