Last Updated February 1, 2026
We collect information that you voluntarily provide when you request a consultation or assessment, complete our discovery or other engagement packages, participate in stakeholder interviews or surveys, use our assessment tools and frameworks, subscribe to our newsletter or content updates, or contact us via email, contact forms, or other communication methods.
This information may include your name, email address, phone number, and job title, as well as your company name, industry, and size. We also collect information about your AI governance needs and challenges, responses to assessment questionnaires and surveys, and any other information you choose to provide to us.
During consulting engagements, we may collect information about your organization's AI systems and use cases, risk assessment data and compliance information, stakeholder feedback and interview responses, technology audit results and documentation, and workshop participation and feedback.
When you visit our website, we may automatically collect your IP address and browser type, device information and operating system, pages visited and time spent on our site, referring website addresses, and information through cookies and similar tracking technologies.
We use the information we collect to provide our consulting services, assessments, and implementation support using our CLEAR™Framework methodology (Clarity, Legal & Risk, Enablement, Accountability, and Responsible Execution). This includes customizing our engagements based on your industry, company size, and specific AI governance needs, as well as generating deliverables such as assessment reports, risk analyses, implementation roadmaps, and other client materials.
We also use your information to communicate with you by responding to inquiries, providing updates, and sharing relevant insights and content. The information helps us improve our services by enhancing our frameworks, tools, and methodologies based on engagement outcomes. Additionally, we use your information to meet legal obligations and protect our legal rights, and with your consent, to send newsletters and updates about AI governance best practices.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
We may share your information only in limited circumstances. These include sharing with trusted third-party service providers who assist in operating our business, such as website hosting, email services, and scheduling tools, all under strict confidentiality agreements. We may also disclose information when required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our clients or others.
In connection with a merger, acquisition, or sale of assets, your information may be transferred with notice provided to you. Additionally, we may share your information when you explicitly authorize us to do so.
We may share anonymized, aggregated data that cannot identify you personally for industry research, thought leadership, or methodology improvement purposes.
We understand that consulting engagements involve sensitive business information and maintain strict confidentiality practices. All client engagement data is protected under confidentiality agreements, and assessment results, risk analyses, and strategic recommendations remain confidential to your organization. We do not disclose client names, case studies, or engagement details without explicit written permission, and client data is stored securely with access limited to authorized personnel directly involved in your engagement.
We implement appropriate technical and organizational measures to protect your information. These measures include encryption of data in transit and at rest, secure file sharing and communication platforms, access controls and authentication requirements, regular security assessments and updates, and employee training on data protection and confidentiality.
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to using industry-standard practices.
We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, complete contracted services and maintain engagement documentation, comply with legal, accounting, or reporting requirements, and resolve disputes and enforce our agreements. Client engagement data is typically retained for seven years following engagement completion unless otherwise specified in our service agreement or required by law.
You have several rights regarding your personal information. You may request access to a copy of the personal information we hold about you, request correction of inaccurate or incomplete information, and request deletion of your personal information, subject to legal and contractual obligations. You can also unsubscribe from marketing communications at any time, request transfer of your data in a commonly used format, and request restriction of processing in certain circumstances.
To exercise these rights, please contact us using the information provided below.
We use cookies and similar technologies to enhance your website experience. You can control cookie preferences through your browser settings, though note that disabling cookies may affect website functionality. We may use cookies for essential website functionality, analytics and performance monitoring, and understanding user preferences.
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can delete such information.
If you are located outside the United States, please be aware that information we collect may be transferred to, stored, and processed in the United States or other countries. By using our services, you consent to such transfers.
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date and sending email notification to active clients and subscribers. Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and how it's used, the right to delete personal information, the right to opt-out of the sale of personal information (note: we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including those outlined in Section 7 above. Our legal basis for processing your information includes consent for marketing communications, contract performance for client services, legitimate interests in improving our services and protecting our business, and legal obligations.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Email: [email protected]