Public inquiry data stays separate from assessment evidence.
Effective August 3, 2026. This notice covers the public website, anonymous readiness screen, and high-level business inquiries.
What this website collects
The website itself does not receive the consultation form fields when you complete them. The form prepares an email in your own email application. Nothing is sent until you review and send that email. Once sent, the inquiry may include your name, business email, company, a high-level description of the system’s authority, the business decision or deadline, and a non-sensitive system summary.
Anonymous readiness-screen session
The Agentic Assurance Readiness Screen stores only fifteen enumerated evidence and bounded-context selections, model versions, the current question, a random anonymous session identifier, start and expiry times, and completion state in this browser tab’s sessionStorage. The screen does not request a name, email, company, free text, file, URL, credential, or assessment evidence. Session data is not placed in the page URL, cookie, persistent browser storage, analytics, or console, and it expires within 24 hours or is removed when you restart or clear the screen.
When the results page opens with a complete session, the browser sends exactly the fifteen bounded evidence and context answer pairs, their question versions, and the model versions to a same-origin LeftOut Security classifier. The server recalculates the immediate result in memory and does not persist or log the answer payload or create an identified record. No name, email, company, free text, file, URL, credential, client evidence, or browser-session identifier is included in that request.
Hosting information
The hosting provider may process standard request information such as IP address, user agent, requested URL, timestamps, and security or diagnostic logs needed to deliver and protect the website. This site does not currently load a public behavioral analytics or advertising tracker.
How inquiry information is used
Information you choose to email is used to evaluate fit, respond to the request, determine whether a consultation is warranted, prevent abuse, maintain business records, and meet legal or security obligations.
Assessment evidence
Client evidence is not accepted through the public website. Any later assessment evidence requires accepted written scope, authorization, handling terms, and an approved evidence channel. See the Evidence Handling Standard.
Service providers and disclosure
Website and inquiry information may be processed by providers supporting hosting, email, security, and business operations. Information is not sold. It may be disclosed when reasonably necessary to operate the service, protect rights or security, comply with law, or complete an authorized business transfer.
Retention and requests
Inquiry records are retained only as reasonably needed for the purposes above and applicable security, accounting, dispute, or legal requirements. To request access, correction, or deletion, email security@leftoutsecurity.com. Some records may need to be retained where required or justified.
Security and changes
Reasonable safeguards are used, but no internet or email service can promise absolute security. This notice may change as the website and operating model mature. Material updates will receive a revised effective date.