AIdentX (“AIdentX”, “we”, “our”, or “us”) is committed to protecting the privacy, confidentiality, and security of information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and protect information when you visit www.aidentx.com or use our platforms, AssessX and IGAX (collectively, the “Services”).
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.
Scope and Application
This Privacy Policy applies to visitors to the AIdentX website, users of the AssessX and IGAX platforms, customers, prospective customers, and other individuals who interact with us in connection with our Services. AssessX and IGAX are independent platforms. Information collected in one platform is processed only for the purposes of that platform unless a customer explicitly enables integration.
Our Role in Data Processing
Depending on the context, AIdentX may act as a data controller or a data processor. We act as a data controller for information related to website usage, marketing communications, and account administration. We act as a data processor when we process customer data submitted into AssessX or IGAX on behalf of enterprise customers. Customers are responsible for ensuring they have appropriate authority and legal basis to provide any data submitted into the Platforms.
Information We Collect
We may collect personal and business information that you voluntarily provide, such as your name, job title, organization, business email address, phone number, account credentials, and communications with us. This information is typically collected when you create an account, contact us, request information, or use our Services.
When you use AssessX, we process assessment-related information that you choose to provide. This may include IAM assessment responses, descriptions of identity and access practices, maturity indicators, risk-related inputs, and optional supporting documentation. AssessX assessments can be self-service and may not require human interviews. The information provided is analyzed using AI-driven logic to generate assessment insights and reports and is logically isolated per customer.
When you use IGAX, we process identity governance information required to deliver governance functionality. This may include identity and access records, role and entitlement definitions, governance policies, workflows, audit logs, access activity records, and configuration metadata. This information is processed solely to provide identity governance, lifecycle management, and compliance capabilities.
We also collect certain technical and usage information automatically when you access our website or Services. This may include IP address, browser and device information, operating system details, pages accessed, session duration, and similar usage data, typically collected through cookies or similar technologies.
How We Use Information
We use the information we collect to provide, operate, and maintain AssessX and IGAX, to authenticate users and manage accounts, and to deliver assessments, governance workflows, analytics, dashboards, and reports requested by our customers. Information is also used to improve platform performance, reliability, usability, and security, to respond to inquiries and provide support, to communicate service-related updates, and to meet contractual, legal, and regulatory obligations. AIdentX does not sell personal data.
Legal Basis for Processing
Where required under applicable law, we process personal data based on one or more legal grounds, including the performance of a contract, legitimate business interests, compliance with legal obligations, or consent where applicable.
AI and Automated Processing
AssessX and IGAX use AI-native and automated processing to support their functionality. In AssessX, AI is used to analyze assessment inputs, identify patterns and gaps, and generate maturity and risk insights. In IGAX, AI is used to support access governance decisions, policy prioritization, and risk-aware enforcement. AI outputs are intended to support decision-making and do not replace customer accountability. Customer data is not used to train public or third-party AI models, is not shared across customers, and is not used for automated decision-making that produces legal or similarly significant effects without appropriate safeguards.
Integration Between AssessX and IGAX
AssessX and IGAX operate as independent platforms. Data is shared between them only when explicitly configured or authorized by the customer. No automatic data transfer occurs by default, and customers retain control over whether and how integration is enabled.
Cookies and Tracking Technologies
AIdentX uses cookies and similar technologies to enable secure sessions, maintain authentication state, support platform functionality, and analyze aggregated website usage. We do not use cookies for advertising, behavioral profiling, or cross-site tracking. Additional information about our use of cookies is available in our Cookie Policy.
Data Sharing and Disclosure
We may disclose information to trusted service providers who support our operations, subject to contractual confidentiality and security obligations. We may also disclose information where required to comply with applicable laws or lawful requests, or to protect the rights, safety, and security of AIdentX, our customers, or users. Customer data is never shared with other customers.
Data Security
We implement appropriate technical and organizational measures to protect information, including encryption where applicable, access controls, logical separation of customer data, security monitoring, and secure development and operational practices. While we take reasonable steps to protect information, no system can guarantee absolute security.
Data Retention
We retain information only for as long as necessary to provide the Services, fulfil contractual obligations, and comply with legal or regulatory requirements. Customers may request deletion or export of their data, subject to applicable laws and contractual terms.
International Data Transfers
Information may be processed or stored in jurisdictions outside your country of residence. Where required, we implement appropriate safeguards to protect information in accordance with applicable data protection laws.
Your Rights
Depending on your jurisdiction, you may have rights to access your personal data, request correction or deletion, restrict or object to processing, or withdraw consent where applicable. Requests may be submitted using the contact details provided below.
Third-Party Links
Our website or Services may contain links to third-party websites or services. AIdentX is not responsible for the privacy practices or content of those third parties.
Children’s Privacy
The Services are intended for business and enterprise use only. We do not knowingly collect personal data from individuals under the age of 18.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.