Privacy Policy
Last updated: May 2026 · EU-West data residency
What we collect
We collect only the information necessary to operate your workspace: account email, display name, workspace membership and roles, upload and download events for test artefacts, and the result files you submit for scoring. All test artefacts are synthetic.
Where data is stored
All workspace data is stored and processed in EU-West regions. Customer-managed encryption keys are on the roadmap for Enterprise plans.
How long we keep it
Reports and audit trails are retained for seven (7) years to support audit reproducibility. Account profile data is retained for as long as your workspace is active and removed on workspace closure, subject to applicable hold periods.
Who can see what
Workspace members see workspace data scoped by their role. Compliance Analytics operators ("CAL operators") can review test datasets and uploaded results for quality control and benchmarking. Operators do not see your authentication credentials.
Your rights
Under GDPR you may request access, correction, deletion or export of your personal data. Submit requests via your workspace owner or contact us through the Get a quote page; we respond within 30 days.
Cookies and analytics
We use first-party session cookies strictly necessary to keep you signed in. We do not run third-party advertising trackers.