How Figment Learning Labs collects, uses, and protects your information.
Palmetto Innovative Education LLC, doing business as Figment Learning Labs ("Figment," "we," "our," or "us"), operates the Figment Learning Labs platform, including FigmentClinic, FigmentProFiles, and FigmentTeamLab (collectively, the "Platform"). We are committed to protecting the privacy of instructors, administrators, and institutions who use our services, and to minimizing the personal information we collect about students.
This Privacy Policy describes what information we collect, why we collect it, how we use and protect it, and your rights with respect to that information. By using the Platform, you agree to the practices described in this policy.
Only instructors and institutional administrators create accounts on the Platform. When an account is created, we collect: name, email address, institutional affiliation, and role (instructor, admin, or superadmin). We store passwords as bcrypt hashes — plaintext passwords are never stored or transmitted to us.
Instructor and administrator accounts are issued and managed by Figment directly. They are not federated with, linked to, or authenticated through any university single sign-on (SSO) or institutional identity system. The email address used to register a Figment account does not need to be the user's institutional email.
An access code grants a student a configurable number of simulation sessions. The Platform records the session activity associated with the code, but the code itself is not linked to any student identity within the Figment system. The mapping of access codes to specific students — if such a mapping exists — is maintained solely by the issuing instructor or institution, outside of the Platform.
During a simulation session, the Platform records: the conversation transcript between the user and the AI character, quiz responses and scores, evaluation dimension ratings and AI-generated narrative feedback, progress notes (in FigmentClinic), session timestamps and duration, and the access code (or instructor account) that initiated the session. This data is associated with the access code or instructor account, not with a student identity.
We automatically log: browser type and version, operating system, IP address (used for security and abuse prevention, not behavioral profiling), pages requested within the Platform, and session timing information. We do not use persistent cross-site tracking, advertising identifiers, or third-party analytics that share data outside Figment.
Instructors who create cases provide: case titles, descriptions, character identities and backstories, clinical or scenario content, quiz questions and answer keys, evaluation rubrics, and uploaded images (background images, and in TeamLab, character card images). This content is associated with the creating instructor's account and institution.
We do not collect: payment card numbers (processed by Stripe under their own privacy policy and never transmitted to Figment servers), biometric data, microphone or video input, sensitive health information about platform users, social media credentials, or any directly identifying information about students who access the Platform via access codes.
We do not sell or rent personal data to third parties. We share data only in the following circumstances:
To the extent any data on the Platform is reasonably linkable to a specific student through the institution's own records, Figment acts as a "school official" with a legitimate educational interest under 34 CFR § 99.31(a)(1)(i)(B) when providing services pursuant to an institutional agreement. In that capacity, we:
Institutions retain control over the access codes they distribute and are responsible for any internal records that link those codes to identifiable students.
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Session transcripts & evaluations | 2 years from session date, or until the issuing institution requests deletion | Automated purge + database delete |
| Instructor / admin account information | Duration of account + 1 year after closure | Account deletion workflow |
| Access code records | 1 year after code expiration | Automated purge |
| Server access logs | 90 days | Automated rotation |
| Billing records (instructor / institutional purchases) | 7 years (legal requirement) | Manual deletion upon request post-legal hold |
Instructor and administrator account holders may request access to, correction of, deletion of, or a portable copy of the personal data Figment holds about them. To exercise these rights, contact us at info@figmenthealth.com. We will respond within 30 days.
Because students do not have accounts on the Platform and Figment does not hold directly identifying information about students, student-related requests should be directed to the institution that issued the access code. The institution holds the records that link codes to specific individuals and can request deletion or export of session data tied to its codes from Figment.
We use session cookies for authentication of instructor and administrator accounts and for maintaining state during student access-code sessions (necessary for the Platform to function), plus a small number of persistent preferences cookies (e.g., audio settings). We do not use advertising trackers, third-party analytics cookies, or social media pixels. Disabling cookies will prevent the Platform from functioning.
Privacy questions: info@figmenthealth.com
Palmetto Innovative Education LLC, doing business as Figment Learning Labs · Mount Pleasant, South Carolina
These Terms of Use ("Agreement") constitute a legally binding contract between you and Palmetto Innovative Education LLC, doing business as Figment Learning Labs ("Figment"). By creating an instructor or administrator account, purchasing access, distributing or using an access code, or otherwise accessing the Platform, you agree to be bound by this Agreement. If you are entering into this Agreement on behalf of an institution, you represent that you have authority to bind that institution.
If you do not agree to these terms, do not use the Platform.
Figment Learning Labs provides AI-powered virtual simulation platforms for professional education, including:
The Platform is intended for use by adult learners in accredited educational programs, continuing education, and professional development contexts. It is not a substitute for clinical supervision, licensed healthcare advice, or formal credentialing programs.
Only instructors and institutional administrators create accounts on the Platform. Students do not have accounts; students access the Platform through anonymous access codes issued by their instructor or institution.
Figment instructor and administrator accounts are issued and managed directly by Figment. They are not linked to any university single sign-on (SSO) system, institutional identity provider, or campus authentication infrastructure. Account holders may register using any working email address — there is no requirement to use an institutional email.
Account holders must provide accurate, current, and complete registration information and are responsible for maintaining the confidentiality of their credentials and for all activity under their account. Any unauthorized access must be reported promptly to info@figmenthealth.com.
Accounts are personal and non-transferable unless issued under an institutional agreement that expressly permits shared access. Login credentials may not be shared with other individuals.
Instructors and institutions purchase access codes that grant students anonymous, time-limited or session-limited access to the Platform. Access codes:
The institution or instructor that purchases and distributes access codes is responsible for tracking which codes are issued to which students within its own records. Figment does not maintain a code-to-student mapping.
You agree not to:
Instructors and administrators additionally agree not to create case content that is sexually explicit, that targets or demeans identifiable real individuals, or that is designed to elicit harmful information from students.
You retain ownership of case content you create (scenarios, characters, questions). By creating and publishing content on the Platform, you grant Figment a limited, non-exclusive, royalty-free license to host, display, and process that content solely for the purpose of delivering the Platform to you and your students.
You represent that your content does not infringe third-party intellectual property rights, violate applicable law, or contain personally identifiable information about real individuals without their consent.
The Platform, including its software, AI integrations, user interface, design, evaluation frameworks, and branding, is proprietary to Palmetto Innovative Education LLC and protected by copyright, trademark, and other intellectual property laws. You may not copy, modify, distribute, sell, or create derivative works from Platform components without express written permission.
The names "Figment Learning Labs," FigmentClinic, FigmentProFiles, and FigmentTeamLab, and the Figment logo, are trademarks of Palmetto Innovative Education LLC.
The Platform uses large language model AI to generate character responses and performance evaluations. You acknowledge that:
Payments are processed by Stripe. Credits and access codes are non-refundable after activation. Institutional subscriptions or bulk purchases are subject to the terms of the relevant institutional agreement. If you believe a charge was made in error, contact info@figmenthealth.com within 30 days.
We may suspend or terminate your access for material breach of this Agreement, fraudulent activity, or non-payment, with or without notice depending on the severity of the violation. Upon termination, your right to access the Platform ceases immediately. Provisions related to intellectual property, limitation of liability, and governing law survive termination.
To the maximum extent permitted by applicable law, Figment's total liability for any claim arising from your use of the Platform shall not exceed the greater of (a) the amount you paid to Figment in the 12 months preceding the claim, or (b) $100 USD. Figment is not liable for indirect, incidental, consequential, or punitive damages.
The Platform is provided "as is." We make no warranty that the Platform will be uninterrupted, error-free, or that AI outputs will be accurate or fit for any particular purpose.
This Agreement is governed by the laws of the State of South Carolina, without regard to conflict of law principles. Any dispute arising from this Agreement shall be resolved by binding arbitration in Charleston, South Carolina, under the rules of the American Arbitration Association, except that either party may seek injunctive relief in any court of competent jurisdiction for intellectual property violations.
Questions: info@figmenthealth.com
Figment Learning Labs takes security seriously. We have implemented technical, administrative, and organizational safeguards designed to protect the confidentiality, integrity, and availability of your data. This page describes our security posture and practices.
The Platform is hosted on Amazon Web Services (AWS) infrastructure in the US East (Ohio) region, with the following protections:
The Platform uses two distinct access pathways:
Across both pathways, we apply the following controls:
Simulation conversation content and evaluation requests are transmitted to OpenAI's API over TLS. Our use of the OpenAI API is governed by a Data Processing Agreement under which:
We do not transmit student-identifying information to OpenAI, because the Platform does not collect such information in the first place. Students access the Platform via anonymous access codes, and conversation content sent to OpenAI does not include student names, email addresses, student ID numbers, or institutional identifiers.
Institutional administrators see only the data tied to their own institution's access codes and instructor accounts. Cross-institution access is prevented at the database query level. Administrators may:
Figment staff access to production data is restricted to a small number of authorized engineers, scoped to specific operational needs, and logged. We do not browse customer data outside of incident response, technical support, or contractually authorized activities.
In the event of a security incident involving personal data, Figment will:
To report a suspected breach: info@figmenthealth.com
We welcome reports from security researchers. To report a vulnerability:
We do not currently offer a bug bounty program, but we will acknowledge researchers who report valid vulnerabilities (with permission).
The following recommendations apply to instructor and administrator account holders:
Students accessing the Platform via access code do not have credentials to manage; the security responsibilities above apply only to instructor and administrator accounts.
Figment Learning Labs runs entirely in your web browser — no app installation is required for the web platform. The simulations use real-time AI and text-to-speech audio, so a stable internet connection and a supported browser are essential for the best experience.
For the best experience, we recommend Google Chrome on desktop or Safari on iOS/iPadOS. JavaScript must be enabled. Browser extensions that block JavaScript or modify network requests (ad blockers, privacy extensions) may interfere with AI response loading.
Minimum hardware: 4 GB RAM, dual-core processor. The Platform does not perform local AI processing — all computation happens server-side — so modest hardware is sufficient as long as the network connection is adequate.
Audio is central to the Figment experience. Text-to-speech character voices require:
figmenthealth.com is not blocked. The Platform continues to function without audio — text responses are always displayed.
The Platform does not currently use microphone input for speech-to-text (students type their responses). No microphone permission is required.
| Feature | Bandwidth Required | Notes |
|---|---|---|
| Text simulation (no audio) | ~1 Mbps | Minimal — primarily small JSON payloads |
| Simulation with TTS audio | ~3–5 Mbps | Audio streams as MP3; larger responses use more bandwidth |
| PDF download | ~1 Mbps | PDFs are typically 50–200 KB |
| Case editor (image uploads) | ~5 Mbps | Only required for instructors uploading background images |
Latency: AI responses are generated server-side and typically take 2–6 seconds. High-latency connections (>500ms) may cause slower response times but do not cause failures.
Firewall requirements: The following domains must be reachable from your network:
figmenthealth.com — Platform application and APIfonts.googleapis.com / fonts.gstatic.com — Typographycdnjs.cloudflare.com — JavaScript libraries (NCLEX report PDF)Figment provides SCORM 1.2 packages for integration with learning management systems including D2L Brightspace, Canvas, Moodle, and Blackboard. Requirements for SCORM embedding:
figmenthealth.comIf the Figment simulation loads as a blank page inside your LMS, the most common cause is an X-Frame-Options header issue. Contact your institution's IT team to verify the LMS is configured to allow framing of figmenthealth.com.
This typically indicates a network timeout reaching the AI API. Try the following:
figmenthealth.com is throttled or filteredIf the issue persists across multiple attempts and devices, the Platform may be experiencing elevated load. Check our status page or contact support.
Audio issues are usually caused by browser permissions or network filtering:
figmenthealth.com and ensure Sound is set to Allowfigmenthealth.com is blockedThe simulation works fully without audio — all responses are displayed as text. You can toggle audio off with the audio switch in the interview interface.
Access codes are case-sensitive and may have expiration dates or session limits set by your instructor.
AI language models are probabilistic and occasionally produce unexpected responses. This is a known limitation of the technology. Strategies to improve response quality:
If you encounter a response that is inappropriate or potentially harmful, please report it to your instructor and to info@figmenthealth.com with the session ID (visible in your browser URL).
Sessions are saved progressively to the server as the conversation proceeds. If your session ended early:
LMS iframe embedding issues are almost always caused by one of the following:
figmenthealth.com. In Safari, disable "Prevent cross-site tracking" temporarily to test.figmenthealth.com to the frame-src allowlist.PDF generation uses browser-based rendering for NCLEX cases and server-side generation for standard interview sessions.
cdnjs.cloudflare.com is not blocked by your network or browserfigmenthealth.comCase save errors are usually caused by missing required fields or a session timeout:
?session_id=355). Including this in your support request allows us to locate your specific session record quickly.
For technical support, billing questions, or to report a problem, contact the Figment Learning Labs support team:
When submitting a support request, please include: your name and institution, the platform you are using (Clinic, ProFiles, or TeamLab), your browser and operating system, the Session ID if applicable, and a clear description of the issue including any error messages you saw.
Figment Learning Labs is committed to making our learning platforms usable by as many people as possible, including learners and educators with disabilities. Accessibility is a core part of how we design, build, and review every Figment product — not an afterthought, and not a one-time exercise.
Our accessibility work is guided by widely recognized international standards rather than a single jurisdiction's regulations. Specifically, we evaluate each Figment product against:
We chose this combined framework so that a single accessibility review is meaningful to U.S., Canadian, U.K., and European institutions without duplicate effort.
Each of our three platforms — FigmentClinic, FigmentProFiles, and FigmentTeamLab — has been reviewed against WCAG 2.1 Level A and AA. Based on that review, the platforms substantially conform to WCAG 2.1 Level AA, with a small number of criteria classified as Partially Supports and a smaller number classified as Does Not Support. The reasons and remediation status for each are documented in the per-product Voluntary Product Accessibility Template (VPAT).
We use the standard ITI VPAT 2.5 (International edition) terminology when describing conformance:
This is a self-assessment performed by Figment Learning Labs, not a third-party audit. We re-review each platform on at least an annual cadence, after any significant feature release, and any time a barrier is reported.
The following features are present across all three Figment platforms:
We test the Figment platforms with the following assistive technology and browser combinations:
We follow accessibility patterns published by the W3C ARIA Authoring Practices Guide, so the platforms are likely to behave correctly with other modern assistive technology, but we do not warrant performance with combinations we have not directly tested.
In the spirit of transparency, the following limitations are known and are tracked in our remediation roadmap:
Items classified as Partially Supports in the VPATs typically reflect specific edge cases (e.g., a particular validation message that is not yet announced via an ARIA live region) rather than systemic gaps. Each one has an owner and a target resolution date.
A current Voluntary Product Accessibility Template (VPAT 2.5 Rev INT) is available for each Figment product:
Each report covers WCAG 2.1 Level A and AA, U.S. Section 508 (Revised), and EN 301 549 (V3.2.1). To request a copy for procurement review or institutional accessibility assessment, please email info@figmenthealth.com with the product name and your institution. Reports are typically returned within two business days.
Accessibility is built into our development process, not added at the end:
To report an accessibility barrier, please contact us at info@figmenthealth.com and include:
We will acknowledge receipt within two business days and provide a status update within ten business days.