AI GOVERNANCEASSESSMENT

Privacy Policy

Last updated: April 2026

This tool does not create accounts, does not store your responses, and does not retain assessment data. Your answers exist only in your browser's local storage and are transmitted to generate your report, after which they are immediately discarded.

What This Tool Does Not Do

This tool does not require or create user accounts. It does not persistently store assessment responses in any database. It does not set cookies — first-party or third-party. It does not load analytics or tracking scripts. It does not serve advertising or share data with advertisers.

Assessment responses are held in your browser's localStorage only and are transmitted once when you request report generation, after which they are processed in server memory and not retained.

What Data Is Processed and When

  • Assessment responses — Transmitted to the server when you click “Generate Report.” Passed to the Claude API for narrative synthesis. Used in memory to produce the PDF. Not stored in any database after the response is returned.
  • Cloudflare Turnstile — Anti-bot verification runs when you request a report. Challenge tokens and request metadata are processed by Cloudflare. Cloudflare's privacy policy governs this processing. No Turnstile data is stored by this application.
  • Contact form submissions — If you optionally submit the contact form after downloading your report, the submission is processed by Formspree and delivered to the operator's email. Formspree's privacy policy governs that submission. Contact form data is not stored in this tool's database.
  • Browser localStorage — Assessment progress is saved locally in your browser only. You can clear this at any time through your browser settings or by using the tool's “Start New Assessment” function.

Third-Party Processors

  • Cloudflare — Turnstile anti-bot verification.
  • Anthropic — Claude API for narrative generation. Assessment data is sent to Anthropic's API with zero-retention configuration.
  • Formspree — Contact form processing only.
  • Vercel — Application hosting and serverless function execution.

Claude API and AI Processing

Assessment responses are sent to Anthropic's Claude API to generate the narrative analysis in the PDF report. Anthropic's API is configured for zero data retention — Anthropic does not train on or retain inputs or outputs from this tool. See Anthropic's privacy policy for details.

No Cookies

This tool uses browser localStorage, not cookies. No first-party or third-party cookies are set. No analytics or tracking scripts are loaded.

Data Subject Rights

You may request information about data processing or exercise your rights under applicable data protection laws, including Singapore's Personal Data Protection Act (PDPA), by contacting privacy@governed-autonomy.com.

Governing Law

This privacy policy is governed by the laws of Singapore.

Operator

Governed Autonomy is the operating name under which this tool is provided. For privacy enquiries, contact privacy@governed-autonomy.com.

Changes to This Policy

This policy may be updated from time to time. The current version is always available at this URL.