Last updated: 27 August 2026
This policy explains how Abcerta ("we", "us") handles personal data in connection with our Foundry tools, including the AI Maturity Index. We are the data controller. If you have any questions, contact us at info@abcerta.com.
Depending on how you use the tools, we may collect:
We use only a single strictly necessary cookie to keep you signed in and secure your session. We do not use advertising, analytics or tracking cookies. Because the only cookie we use is essential to a service you have asked for, no consent banner is required. If this changes, we will update this policy and seek consent where needed.
We do not sell your personal data. We share it with a small number of trusted sub-processors who process it on our behalf under contract:
We may also disclose data to professional advisers, to a buyer in a business sale, or where required by law.
Some sub-processors may process personal data outside the UK. Where they do, we ensure appropriate safeguards are in place as required by UK GDPR, such as a UK adequacy decision or the UK International Data Transfer Agreement (IDTA).
We keep personal data for as long as you have an account and for as long as needed to provide the tools, then delete or anonymise it within a reasonable period, unless we must keep it longer for legal, accounting or dispute-resolution reasons. Audit logs and billing records may be kept for longer where necessary.
Subject to certain conditions, you have the right under UK GDPR to access your data, have it corrected or erased, restrict or object to processing, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To exercise any right, contact info@abcerta.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would welcome the chance to help first.
We use appropriate technical and organisational measures, including encryption in transit and at rest, access controls and least-privilege permissions, and per-company data isolation so each customer's data is kept separate. No system is completely secure, but we work to protect your data and respond promptly to any incident.
The tools are intended for organisations and their staff. They are not directed at anyone under 18, and we do not knowingly collect personal data from under-18s.
We may update this policy from time to time. We will post the updated version here with a revised date and, where changes are significant, take reasonable steps to let you know.
To contact us about privacy, email info@abcerta.com. You can also contact the ICO at ico.org.uk if you have concerns about how we handle your personal data.