This page explains what data we collect, where signed-in workspace data is stored, when on-device storage is used instead, and your rights over your data.
When you sign in, your company's workspace data — company profile, AI systems inventory, assessment results, Compliance Pack configuration and generated documents, AI Literacy learner lists, training progress, certificates, and bundle/order activation status — is stored in Supabase under your organization's own account, kept separate from every other company's data. Only members of your organization can access it.
If you use the Compliance Pack or AI Literacy workspace without signing in, your entries are saved only on your device (using your browser's localStorage) — not on our servers. Clearing your device's storage removes it. If you later sign in and we detect existing local data on that device, we ask before saving it to your account; it is never uploaded silently.
If your organization uses AI Literacy training, learner records may include name, email, department, job role, assigned training path, training status and progress, and certificate evidence (once issued). This data is scoped to your organization and is not publicly accessible.
Our contact, order and request forms (for example the Free Score lead capture, the Compliance Pack request panel, the AI Literacy setup request, and consulting request panels) collect the information you type into them — such as name, company, email, country, VAT/tax ID, billing address and notes — and this may be stored in Supabase so our team can follow up with you.
We do not sell customer data. We do not use your workspace data to train AI models. We do not claim ISO 27001, SOC 2 or other formal security certifications at this stage — see our Trust & Security page for what is in place today and what remains on our roadmap.
You may request access to, correction of, export of, or deletion of your personal data and your organization's workspace data by contacting us (see Contact below).
Please avoid entering sensitive, confidential or highly regulated information beyond what is needed for your AI Act readiness work. For high-risk or sensitive AI use cases, we recommend an expert or legal review in addition to using EU AI Passport.
Questions about this policy, or requests to access, correct, export or delete your data? Contact us at info@euaipassport.com.