Privacy

Your assessment is stored on Cloudflare D1 under a cryptographically-random ID. Anyone with the URL can read or modify the assessment — that is the access control. We do not collect emails, IPs, or fingerprints. The only optional identifying information is the company name field, which you supply voluntarily and which is part of your assessment payload, not stored separately or indexed. Assessments inactive for 12 months are deleted. The Cloud Sovereignty Index source code, including the persistence Workers, is public — you can audit our claims.

The privacy claim is enforced by published Worker code anyone can audit.

What we store

• Your answers (stored under a random ID, accessible only via URL)
• Company name, if you voluntarily provide it
• Assessment metadata: variant, country, service models, role

What we never collect

• Email addresses
• IP addresses
• Browser fingerprints or cookies
• Any identifying information beyond what you explicitly type

Data retention

Assessments are deleted automatically 12 months after last activity.