Privacy
What this tool collects
Your answers to the assessment questions, the profile information you give about your organization, and the role you select for yourself. If the person who set up the assessment invited you by email, we hold that email address until the assessment closes. If the person who set up the assessment gives us a recovery email, we hold it until the assessment is deleted, and use it for exactly one thing: emailing that exact person their own dashboard link back, only when they ask for it. It is never sent to any other address, never shared, and never used for anything else.
What it does not collect
No account, no password. No analytics, no advertising, no tracking of any kind. We do not know who you are beyond the name and role you choose to enter, and you can leave both blank. We never sell or share your data with anyone, so a Global Privacy Control signal from your browser changes nothing here — there is nothing to opt out of.
Cookies
One cookie, which keeps you signed in to your own assessment while you complete it. Nothing else. No third party sets a cookie on this site because there are no third-party scripts on it.
Who can see your results
The person who set up the assessment, and anyone they share a link with. Nobody else. We do not sell, share or publish your results, and we do not use them for benchmarking or research unless you ask us to.
How long we keep it
Until you delete it, or 180 days after the assessment closes, whichever comes first. Deleting is real deletion, not a hidden flag.
A note on sensitivity
This assessment asks how well your organization defends itself. A low score on threat defence is useful information to somebody who means you harm. We hold it accordingly: it is not indexed by search engines, it is not linked from anywhere public, and access requires the specific link issued to you. You should treat your own copy the same way — and the shareable summary export exists precisely so you can circulate results without circulating that detail.
Your choices
You can export everything, in a format you can read and re-use. You can delete everything. You do not need to ask us.