Privacy Notice — Draft

This is an MVP placeholder. Before launch it should define the data controller, lawful bases, retention periods, processors, international transfers, cookies, user rights and contact details.

Data minimisation by design

The platform should avoid collecting unnecessary personal data inside risk assessments and compliance documents.

AI processing

Customers should be told when information is processed by AI systems, what categories of data are sent, how long data is retained and whether outputs are subject to human review.