Privacy Policy

1. Scope and operator

AIGR™ is an AI governance assessment, readiness and ratings platform operated by AIGX Research Inc. This policy applies to information processed through AIGR public websites, secure client portals, assessment workflows, evidence functions, report generation and related support interactions. A separate enterprise agreement may contain additional privacy, security, retention or data-processing terms.

2. Information we process

Depending on how AIGR is used, information may include:

• account and business contact information, including name, business email, title and organization;
• organization, AI-system, use-case, jurisdiction, lifecycle and governance-profile information;
• assessment responses, control conclusions, framework mappings, findings, risks, policies, incidents, vendors and remediation records;
• evidence files and evidence metadata submitted by authorized users, including file names, integrity hashes, dates, ownership and review status;
• report records, report identifiers, issuance history and integrity information;
• authentication, access, security, device, browser, IP-derived security and audit-log information; and
• communications sent to AIGR or AIGX Research Inc. for support, assessment intake or administrative purposes.

3. How information is used

Information may be used to provision and administer accounts; authenticate users; operate assessments and evidence verification; calculate governance-readiness results; support controlled rating workflows; generate reports; maintain audit, integrity and decision records; provide support; investigate security events; prevent misuse; satisfy contractual or legal obligations; and improve the reliability and usability of the platform.

4. Evidence and confidential materials

Organizations control the information and evidence they submit and remain responsible for ensuring they are authorized to provide it. Users should avoid uploading personal, confidential, regulated or sensitive information that is not necessary for the applicable assessment. Access to submitted evidence is restricted through workspace permissions and platform controls, but no internet-based system can be guaranteed to be completely secure.

5. Service providers and processing locations

AIGX Research Inc. may use infrastructure, hosting, security, communications, analytics or other service providers to operate AIGR. Those providers may process information only as necessary to provide their services and may operate in jurisdictions different from the user. Where appropriate, contractual, technical and organizational safeguards are used to protect information handled by service providers.

6. Retention

Information is retained for as long as reasonably necessary to provide the relevant service, maintain assessment and report integrity, support audit and security requirements, resolve disputes, enforce agreements and satisfy applicable legal or contractual obligations. Certain audit, report, integrity or decision records may need to be retained even after other workspace information is removed.

7. Security

AIGR uses administrative, technical and organizational safeguards designed to protect account, assessment, evidence and report information. These may include role-based access controls, tenant isolation, authentication controls, private evidence storage, integrity hashing, audit logging and controlled report issuance. Security safeguards reduce risk but do not eliminate it.

8. Privacy choices and rights

Depending on applicable law and the relationship between AIGX Research Inc., the organization and the individual, a person may have rights to request access, correction, deletion, restriction or other treatment of personal information. Some requests may be limited where information must be retained for security, audit, contractual or legal reasons. Requests can be sent to [email protected].

9. Cookies and session technologies

AIGR may use cookies or similar technologies required for authentication, session continuity, security, preferences and core site functionality. Additional analytics or measurement technologies, if enabled, should be described through the applicable consent or site notice.

10. Disclosures

Information may be disclosed to authorized organization users, contracted service providers, professional advisers or authorities where reasonably necessary to operate AIGR, protect rights or security, comply with law or respond to valid legal process. AIGX Research Inc. does not authorize third parties to use client assessment information for unrelated purposes merely because they provide infrastructure or support services.

11. Changes to this policy

This Privacy Policy may be updated as AIGR services, legal requirements or operating practices evolve. The effective date shown on this page identifies the current published version. Material changes may also be communicated through the website, portal or other appropriate channel.

12. Contact

Privacy questions, requests and notices relating to AIGR™ may be sent to [email protected].