No public evidenceCarnegie Speech and GDPR
CertReports found no public GDPR evidence for Carnegie Speech as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Scope
- Carnegie Speech is an educational service provider company and part of our business activities involves the offering of online/offline courses aimed at improving English skills. These courses may/may-not be part of curricula activity at a school, or sponsored by a corporate entity. The information we collect on our students is associated with providing that service. To provide our educational service we collect information about students that includes the name, email address, native language, and gender. In addition, we collect information that the student participated in a course run by a school or some corporate entity. Finally to provide the speech analysis service of our products, we collect audio recordings of your speaking exercises and performance data about how well you performed in doing those exercises. To provide our educational service we collect information about the teachers that includes the name, email address, native language, and gender. In addition, we collect that you are managing students in a course run by a school or some corporate entity. Carnegie Speech also offers Speech/Text services to commercial customers. Those commercial customers package the use of the service to their customers. Therefore we divide the parties affected by any Carnegie Speech data collection into Service Provision customers (the commercial customers) and Service Usage customers (the end-use customers). 2.4.1 Service provision data: if you are a Client (or a prospective client), in addition to the information referred to in paragraph 2.1, we may collect personal data on you in the ordinary course of our business relationship with you, i.e. the provision of our services to you. 2.4.2 Service usage data: Service use data can be further broken down into how the Service provision customer packages our services with their product. In most cases, the service provision customer sends the user’s data to one of our internet services hosted in the cloud. This cloud- based use exposes the data to us, and possibly others. In some cases, the service provision customer sends the user’s data to a service on the user’s device. In this case, Carnegie Speech never sees the user’s data. In some situations, the on-board user can request cloud based analysis for a period of time to debug problems with their use. This debug period is intended to be temporary. The data in these cases are: Cloud based use: When using the cloud-based service we collect the IP address of each use, along with all the information sent to us associated with that use. That information may include user-identifiable marks. In addition, it can include text/speech from a user. On-board use: When using the onboard service, we may collect the IP address of the device using the service, and the provisioning-client of the service to determine the license validity of using the onboard service. If you are a student we use this personal data: (a) To provide a better educational service. The native language and gender of the student is used to customize the curriculum to the student. The records of each student’s performance are used to further customize the curriculum to the student. This customization speeds up learning. If you are a teacher/administrator we use this personal data: To allow teachers/administrators to manage their class: we gather the names of students in a class to make it possible for teachers/administrators to manage their classrooms. This includes them having the ability to see performance reports on the students in their classes. Amazon's AWS machines are used to process the speech data and store it.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Carnegie Speech: Inactive | Live pagesha256 b030a168fc |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Carnegie Speech GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the AI infrastructure category) whose GDPR row is verified or vendor-stated, ranked by similarity.
