This text is not yet in force. It will apply from the date shown at the top once it is.

Plimsoll SI Privacy Notice

Last updated: not yet in force. Effective: not yet in force.

1. Who we are

Plimsoll SI is run by its operator ("Plimsoll", "we", "us"). Plimsoll tests AI assistants and agents for customers who state that they own them or hold permission to test them, and issues a signed record of each test (a "passport"). A passport records what was tested, how, and the statistical bound that applies. It is not a statement that an AI system is safe or fit for any purpose, and Plimsoll does not vouch for the system tested.

Privacy contact: privacy@plimsollsi.com. Person in charge of the protection of personal information (Quebec): privacy@plimsollsi.com.

2. Our two roles

Where we decide why and how information is used (we act as controller). Your account, sign in and security information, billing records, support and sales messages, our audit records, the details of anyone a customer names as having given permission to test, sanctions and risk checks, abuse reports, and opt out requests from people who operate systems that our customers test.

Where we act on our customer's instructions (we act as processor or service provider). When a customer runs a test, the questions we send, the replies their AI system returns, their connection details and their access policy are handled for that customer under our Data Processing Addendum. If you work for, or use the services of, one of our customers and your information appears in a reply from their AI system, that customer is responsible for it and you should contact them first. We will help them answer you.

When a test may not have been authorised. If we have reason to believe a test was not authorised, we decide for ourselves how to stop it, what to keep and whom to tell, and we are responsible for that handling as a controller.

3. Information we collect and why

We do not sell personal information. We do not share it for cross context behavioural advertising. We do not use customer test content to train any AI model. We do not use advertising or analytics cookies.

4. How tests handle replies

Our system sends ordinary questions to a customer's AI system and reads the replies. The full text of a reply is held in memory only while it is graded and is then discarded; we never write it to storage. We keep the grading outcome and a keyed digest of the reply, so the signed record can be checked against the reply by someone who holds it, without the digest revealing the reply. A customer may choose to keep the smallest failing example of a finding with us; otherwise the example stays on the customer's side. Paused tests keep their working state for 30 days and are then deleted.

Every request we send identifies itself (see plimsollsi.com/probe). Our service refuses to test public AI model provider interfaces, private network addresses on hosted runs, and government, military and international domains unless we hold written permission from the system's owner.

5. Our legitimate interests

We rely on legitimate interests to: keep our service and our customers' accounts secure; keep audit records showing that each test was confirmed by someone who said they owned the system or held written permission; answer abuse reports and enforce opt outs; screen for sanctions and misuse; and establish, exercise or defend legal claims. We have weighed these interests against your rights. Audit records hold who did what and when, never the content of replies, and are used for no other purpose. You may object to this use (section 9).

When a system you register belongs to a different domain from your verified email, or other risk signals appear, we may ask for a stronger check before testing. This asks for more proof; it is not a refusal. Some signals pause an account automatically. A person on our staff reviews every pause, and you may ask for that review and give your view.

If a customer names a person who gave permission to test, we may contact that person to confirm it. We use their details only for that purpose, and our confirmation email tells them how we got their details and links to this notice.

6. Who we share information with

• Service providers acting for us: our hosting provider, our transactional email provider, our payment processor, our email forwarding provider and, if you choose to sign in that way, the code hosting service you sign in with (we read only your verified primary email address and do not keep its access token). The current list, with locations, is at plimsollsi.com/subprocessors.
• People a customer chooses: a customer may share a passport by link or give named validators access. A passport shows the organisation and system tested, the ownership level, the commitments and the results. It does not contain reply text, and shared views do not show customer staff names by default.
• Cloud services under the customer's own permissions, where a customer connects an AI system hosted there.
• System operators and authorities, to stop unauthorised testing. If an operator reports testing of a system they control, and we confirm they control it, we may tell them that testing took place, when, at what volume and at what ownership level, and what we have done about it. We tell them who ran it only with the customer's consent, under legal process, once we find the customer lacked permission, or where the operator intends to bring a legal claim and we judge it reasonable. We disclose to authorities where the law requires it, on a request with lawful authority, or where we have reasonable grounds to believe an offence has been committed; information about people in the EU or UK goes to authorities elsewhere only on a recognised legal basis. We record every such disclosure and tell the customer concerned unless the law forbids it or that would put someone at risk. We never pass on the content of tests run by customers whose authority is not in question.
• Others where the law requires, to protect people from harm, or in a sale or reorganisation of our business (with notice to you).

7. How long we keep information

Backups roll off within 35 days of deletion from live systems.

8. Where information is processed

We host our service in the European Union (Finland). Some of our service providers process information in other countries, including the United States. Where information leaves the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision (for example the one covering Canada's commercial privacy law) or on the European Commission's standard contractual clauses, the UK International Data Transfer Addendum and the Swiss addendum. For personal information about people in Quebec, we assess each transfer outside Quebec before it happens. You may ask us for a copy of the relevant safeguards.

9. Your rights

Depending on where you live, you may have the right to know whether we hold your information and get a copy, correct it, delete it, restrict or object to our use of it (including use based on legitimate interests), receive it in a portable format, withdraw consent where we rely on it, and complain to a supervisory authority. In Canada you may complain to the Office of the Privacy Commissioner of Canada, and in Quebec to the Commission d'accès à l'information. In California and other US states with privacy laws, you have rights to know, delete and correct, and we will not treat you differently for using them. We do not sell or share personal information as those laws define it, so there is nothing to opt out of.

To use a right, email privacy@plimsollsi.com. We answer within one month (30 days in Canada, 45 days where US state law allows) and tell you if we need longer and why. We may ask you to confirm who you are. You may act through an authorised agent. If your request concerns information we hold for one of our customers, we pass it to that customer and help them answer.

Operators of systems tested. If you run a system and do not want it tested through Plimsoll, see plimsollsi.com/probe: use the opt out form, serve /.well-known/plimsoll-optout with HTTP status 200, or write to abuse@plimsollsi.com. An opt out applies to every customer at once.

10. How we protect information

Encryption in transit for every connection; customer secrets encrypted at rest; sign in links kept only as digests, single use and short lived; two factor sign in for account owners and administrators; single sign on for enterprise customers; audit records kept apart from test content; production access limited to named staff and logged; encrypted backups; reply text never written to storage. No method is free of risk; we will tell you and the relevant authorities of a breach as the law requires.

11. Cookies

We set one cookie: a session cookie that keeps you signed in. It is strictly necessary, cannot be read by scripts on the page, and is not used to track you elsewhere. We do not use analytics or advertising cookies. If that changes, we will ask for your consent first.

12. Children

Plimsoll is a service for businesses. It is not meant for anyone under 18 and we do not knowingly collect information about children. Customers must not point tests at systems built for children without telling us and holding written permission.

13. Changes

We will post changes here and, for material changes, tell account owners by email at least 30 days before they take effect.

14. Contact

privacy@plimsollsi.com.