What we collect, why, and what you control.

Who is responsible

The AI Readiness Index is operated by Brain Digits. Questions about this policy, or any request concerning your data, should be sent to aiindex@braindigits.com.

What we collect

• Account details. Your name, professional email address, job title and — if you choose to provide it — your phone number and country.
• Organization details. The organization you assess: its name, country, city, sector, type and size band, and optionally its website.
• Assessment responses. Your answers, any files you upload as supporting evidence, and the scores calculated from them.
• Consent records. Which consents you gave, when, and the exact version of the wording you were shown.
• Operational records. Authentication events, and an audit trail of actions taken on your assessment, including the IP address the action came from.

We do not use advertising trackers, and we do not sell data to anyone, in any form, under any circumstances.

Why we hold it

• To create and secure your account, and to let you resume an assessment across devices.
• To calculate, store and display your results.
• To let the review team verify submissions and ask for clarification where an answer is unclear.
• Where you have separately opted in, to contribute to aggregated, anonymized statistics such as sector or regional averages.

Who can see your responses

Your individual responses are visible to you, to colleagues who are members of the same organization on this platform, and to the index review team. They are not visible to other participants, and they are never published. Access is enforced in the database itself through row level security, not only in the interface.

Evidence files are stored in a private bucket and are reachable only through short-lived signed links issued to people who are already authorised to see that response.

Aggregated research — your choice

During registration you may separately opt in to having your responses contribute to aggregated analysis. This is optional, is never a condition of completing an assessment, and can be withdrawn at any time from your account settings. Aggregated outputs never identify an organization, and are only produced from groups large enough that individual organizations cannot be inferred.

How long we keep it

Account and assessment data is retained while your account is active, and for as long as needed to keep published aggregate statistics reproducible. You may request deletion of your account and its responses at any time. Where a response has already contributed to a published aggregate, we remove the identifiable record and retain only the anonymised contribution.

Your rights

• Access a copy of the data we hold about you.
• Correct anything inaccurate — most fields are editable directly in your account.
• Withdraw research consent without affecting your results.
• Request deletion of your account and responses.

Write to aiindex@braindigits.com and we will respond within thirty days.

Security

Traffic is encrypted in transit. Authentication is handled by a managed identity provider with email verification. Server-side secrets are never exposed to the browser. Every permission is enforced twice — in the interface and in the database — on the assumption that the interface can be bypassed.

Changes to this policy

If the meaning of this policy changes, the consent wording version is incremented and participants are asked to review it. The version you agreed to is recorded on your profile and is shown on your account page.