Trust center

Responsible technology, with the evidence to back it up

What we do about privacy, AI, security, accessibility, and compliance, what we do not claim, and where to find the proof.

  • Data privacy
  • AI governance
  • Security
  • Accessibility
  • Compliance & certifications
  • Responsible technology

We publish a commitment here only when we can show what it rests on. Each item below states its basis: how the website is built, a policy, or an independent certificate or audit. Goals are labeled as goals, and we list what we do not claim as clearly as what we do.

Data privacy

How this website handles information about you, and the choices you have.

  • Analytics are opt-in

    In place

    This website measures usage only if you choose to allow it, and only through our own server. It sends no names, emails, IP addresses, or form contents.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.Cookie policy →
  • Browser privacy signals are honored

    In place

    If your browser sends Global Privacy Control or Do Not Track, analytics and personalization stay off whatever else is set.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.Cookie policy →
  • No third-party advertising or analytics scripts

    In place

    The website loads no third-party analytics or advertising scripts. Optional embeds (scheduling, maps) are listed below when enabled.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.Data flows below →
  • Personalization stays in your browser

    In place

    If you turn it on, the list of topics you viewed is stored only on your device, is never sent to us, and can be cleared at any time.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.Cookie preferences →

What we do not claim

  • • Our privacy policy explains how we handle personal information. Read it for the full text.

AI governance

How AI is used on this website, and how we approach it in client work.

  • AI answers are labeled and disclosed

    In place

    The website assistant says it is AI, that answers may be wrong, that questions are processed by Google's Gemini service, and asks you not to share confidential details.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.Try the assistant →
  • The assistant is configured to stay within our content

    In place

    It is instructed to answer only from our published information, not to invent prices, results, clients, or certifications, and to hand off to a person for anything it cannot settle. Instructions reduce, but cannot eliminate, errors.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.
  • Links the assistant gives are checked

    In place

    Any page link in an assistant answer is validated against our real pages before it is shown.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.
  • Estimates are labeled as estimates

    In place

    Results from our ROI calculator and Solution Finder are presented as illustrative guidance, never as quotes or guarantees.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.ROI calculator →

What we do not claim

  • • AI can produce incorrect or incomplete answers. Treat assistant responses as guidance, and confirm important details with our team.

Security

The security design of this website and its accounts.

  • Account sessions use protected cookies

    In place

    Sign-in uses a signed, HTTP-only cookie that scripts cannot read, with a maximum lifetime of seven days. Passwords are stored only as salted hashes, and changing a password signs the account out everywhere.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.

What we do not claim

  • • No system is perfectly secure. We do not claim our website is free of vulnerabilities.

Accessibility

Our aim is for everyone to be able to use this website.

  • Standard accessible patterns are used in our components

    In place

    Interactive elements have visible focus indicators, form fields have labels, form errors are announced, and menus, accordions, and search use standard accessible patterns. This describes how the components are built, not the result of an audit.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.

What we do not claim

  • • We have not published an independent accessibility audit, and we do not claim WCAG conformance.

Compliance & certifications

What we hold, and how we talk about regulation.

  • We separate 'designed with in mind' from 'certified'

    In place

    When our pages mention regulations such as GDPR, HIPAA, or DORA, they describe considerations we design around. We claim certification or compliance only for items listed under certifications below.

    Basis: Publishing policyA publishing rule applied to this website's content.Industries →

Responsible technology

How we try to build and communicate responsibly.

  • Consent choices are equally easy to accept or decline

    In place

    When a consent banner appears, rejecting non-essential storage is as prominent as accepting it, and you can change your choice any time.

    Basis: Website implementationImplemented in this website's code. Re-verify after changes.Cookie preferences →
  • We describe our work factually

    In place

    We do not publish invented results, clients, partner status, or credentials. Customer stories, quotes, credentials, and partner status appear only when they are real and approved.

    Basis: Publishing policyA publishing rule applied across this website.

Certifications & attestations

Independent credentials we hold. Listed only when verified.

No third-party certifications or attestations are listed yet.

We will list them here only once they are verified, with the issuer. Until then, please do not assume we hold any.

Where your information goes

A plain list of the data flows on this website.

Data flows on this website
PurposeGoes toWhat is sentYour control
Contact, consultation, proposal, event, download, and newsletter formsAnavo's own systems (our API)What you type into the formConsent checkbox and privacy policyLearn more →
Website assistantGoogle (Gemini API)The questions you type and the assistant's replies. Not form data.Notice in the chat. Please avoid confidential details.Learn more →
Usage analytics (only if you opt in)Anavo's own API (first party)Page and button events, a random per-tab ID. No names, emails, or IP addresses.Opt-in; off if your browser sends a privacy signalLearn more →
Personalization (only if you opt in)Stays in your browserCounts of coarse topics you viewedOpt-in; clearable any timeLearn more →
Scheduling embedNot enabledNoneNothing is loaded
Map embedNot enabledNoneNothing is loaded

Policies & documents

The full text behind the summaries above.

Raise a concern

Report a security concern

Please use the contact page and mark your message as a security concern.

Privacy requests

See the privacy policy for how to exercise your rights.

For anything else, contact our team.

Questions about how we handle your data?

Ask us directly. If we cannot substantiate something, we will tell you so.

  1. 1Tell us your goalsShare a few details.
  2. 2We confirm a timeWe reply with a time that works.
  3. 3We talk it throughA focused conversation on next steps.