Security & Trust
This page is maintained by AI Right™ (operated by Adeltus, Cork, Ireland) to answer common security and privacy questions about the AI Right™ platform. It describes the controls that are enabled today. It is not a formal certification.
Encryption in transit
All traffic to airight.ie and to our managed backend is served over HTTPS.
Managed, EU-first storage
Assessment data, files and authentication are handled by our managed cloud backend, primarily hosted in the EU (Ireland).
Least-privilege access
Database access is restricted by row-level security policies. Only authorised administrators and the automated systems that generate your report can read assessment data.
Minimal data collection
You can complete the assessment without providing contact details. Contact details are only requested if you want a copy of your PDF report by email.
How assessments are processed
Your answers are scored against a fixed AI Right™ framework to produce your report. No Large Language Model or generative AI system writes or edits the recommendations. They are drawn from a predetermined library. See our Privacy Policy for the full detail.
Benchmarking is aggregate only
Benchmarking figures are only shown once enough responses exist to protect confidentiality (minimum thresholds apply for both overall and sector cohorts). Individual organisations and individuals are never identified.
Cookies and tracking
AI Right™ does not currently load third-party analytics or advertising scripts. Where non-essential cookies are added in future, they will only run after you opt in via the cookie banner. See our Cookie Notice.
Report a security concern
If you believe you have found a security vulnerability, please contact us in confidence. We will acknowledge your report, investigate, and keep you updated. Please do not disclose the issue publicly until we have had a reasonable opportunity to address it.
No system can be guaranteed to be 100% secure. We describe the controls that are actually enabled and do not overstate the protection provided. Where third-party processors are involved, they are subject to their own security programmes and data protection commitments.