What we keep, and what we don’t.

What we record about a visitor

Only what you type and what your own browser sends. There are no third-party trackers, no advertising pixels, and no fingerprinting.

• •Email address, first and last name — supplied by you at signup or when a service provider unlocks their score
• •Whether that email has been verified
• •The page you first landed on, the referring site, and any utm_ tags already in the link you followed
• •A dated trail of what you did: signed up, verified, started or submitted an assessment, viewed a study guide, invited a service provider

What a service provider gives us

A service provider completing a tokenized assessment link is asked, after submitting, for their name, work email, and which approved pension fund the assessment is for. That is what unlocks their own score.

The pension fund is chosen from a fixed list — a service provider cannot direct their submission at an arbitrary organization.

Who can see an assessment

An assessment is scoped to the organization that requested it. Another organization assessing the same service provider sees its own result and never yours.

The service provider who filled it in sees their own headline score, risk band and per-domain percentages — not the answer-level detail, and never another provider's results.

Where AI is used, and where it is not

The score is computed entirely in deterministic code. No model sets an answer, moves the score, or cancels a red flag — the same inputs always produce the same number, and the formula is published on the Services page.

AI reads the free-text comment behind a “Yes” and grades how well it substantiates the claim. That produces a second, clearly-labelled evidence-adjusted score shown beside the official one. If the AI is unavailable, the assessment still scores normally.

What we never do

• •Sell or rent personal data
• •Buy data about you from a broker, or combine your record with purchased data
• •Track you across other websites
• •Infer anything about you beyond what you told us or your browser sent
• •Show your results to anyone other than the organization that requested them

Your data, on request

You can ask for a copy of everything held about you, ask for it to be corrected, or ask for it to be deleted. Use the address below and we will confirm in writing when it is done.

Deleting an account does not retract an assessment already delivered to a plan sponsor — that is their fiduciary record, not ours to remove. We will say so plainly rather than quietly leaving it in place.