Medley maintains technical and organizational measures designed to protect customer data against unauthorized access, loss, misuse, alteration, or disclosure, taking into account the nature of the service and the risks of the processing.

These measures include access controls, confidentiality obligations, secure transmission of data, managed cloud infrastructure, operational monitoring, backup and recovery practices, and procedures for responding to security issues.

Access to customer data is restricted to authorized personnel and service providers with a business need to operate, support, secure, or maintain the service.

AI features may process customer data to provide Medley functionality. Where Medley uses third-party AI providers, Medley configures those services so customer data submitted through Medley is not used to train their general-purpose models where Medley controls the relevant setting.

Medley uses subprocessors to provide parts of the service. A current list of subprocessors is available at /subprocessors.

Security questions can be sent to hello@medley.fm.