Data & Privacy

AIM collects the minimum data necessary to operate the platform and deliver its services. Data collection falls into three categories: information you provide directly, information generated by using the platform, and security and operational data collected automatically.

Information you provide

• Account information — your name and email address used to create and manage your account.
• Organization details — your organization name, sector, and team member information when you set up a workspace.
• Assessment inputs — system descriptions, technical architecture details, constraints, budget parameters, and other information you enter when conducting an assessment.
• Collaboration invitations — email addresses of guest collaborators you invite to specific assessments.

Information generated by the platform

• Generated documents — modernization plans, RFP drafts, IGCE estimates, and other outputs created from your assessment inputs.
• Review workflow records — document review status, approvals, flags, and reviewer comments.
• Project health data — Modernization Pulse snapshots and project health scores derived from your assessment data.

Security and operational data

• Authentication events — login activity, session information, and multi-factor authentication records.
• Activity and access logs — records of who accessed which resources, when, and what actions were taken. These are maintained for security, compliance, and incident investigation purposes consistent with NIST SP 800-53 AU-2 and AU-3.
• Device and connection information — technical information about the device and connection used to access the platform, collected for security monitoring and abuse prevention.

AIM uses your data exclusively to operate and improve the platform for you. Specifically:

• To deliver the service — your assessment inputs are used to generate recommendations, reports, cost estimates, and other deliverables.
• To power AI analysis — your inputs are sent to Anthropic's API to generate AI-driven outputs. Anthropic does not retain your data beyond the API call under our agreement. Your data is never used to train AI models.
• To operate your workspace — account and organization data is used to manage access, billing, and team collaboration.
• For security and compliance — activity and audit logs are retained to detect and investigate security incidents, meet compliance obligations, and maintain platform integrity.
• To maintain platform reliability — diagnostic and operational data is used to monitor service health and resolve incidents.

AIM does not: sell your data, share it with advertisers, use it to train AI models, provide it to technology vendors for competitive intelligence, or receive compensation from vendors based on your assessment outcomes.

AIM retains different categories of data for different periods based on operational need, legal requirements, and compliance obligations. The table below describes what we retain and for how long.

Audit log archival follows a two-tier schedule: records are actively queryable for 90 days, then moved to a compliance archive for the remainder of the 3-year period, after which they are permanently and irrecoverably deleted. This schedule is aligned with NIST SP 800-53 AU-11.

You can request deletion of your account or your entire organization at any time from the platform settings. Deletion follows a defined process:

Guest collaborators are external stakeholders (architects, vendors, agency partners) invited to a specific assessment via a time-limited email link. Guests operate under a minimal data model:

• No permanent platform account is created. Guests authenticate via one-time email verification.
• The inviting organization's assessment owner controls what the guest can see and do. Guests cannot generate AI outputs, trigger pipelines, or export reports.
• Guest sessions expire automatically. Expired sessions are cleaned up by an automated process.
• Guest access events (who accessed, when) are logged in the assessment audit trail for the assessment owner's review.
• Guest email addresses are retained only for the duration of the invitation and are not used for any marketing or outreach.

AIM uses a small number of third-party services to operate the platform:

AIM does not use advertising networks, data brokers, or analytics platforms that share data with third parties. Any analytics used are limited to aggregate platform performance metrics.

As an AIM user or organization administrator, you have the following rights with respect to your data:

• AccessYou can view your account information, organization settings, and assessment content within the platform at any time.
• CorrectionYou can update your account information, organization details, and assessment content directly from the platform.
• DeletionOrganization owners can submit a deletion request from the organization settings. Deletion is permanent after the 30-day cancellation window.
• PortabilityGenerated documents and reports can be exported in PDF and structured formats from within the platform.

AIM is designed with security as a foundational requirement, not an afterthought. Key controls include:

• Multi-factor authentication (MFA) enforced for all protected routes when enrolled
• End-to-end HTTPS with HTTP Strict Transport Security (HSTS) including subdomains
• Role-based access control with six distinct organization roles (Owner, Admin, Engineer, Program Analyst, Reviewer, Viewer), enforced server-side
• Tamper-evident audit logs with cryptographic hash chaining aligned to NIST SP 800-53 AU-9
• All AI analysis performed server-side — assessment data does not traverse the client
• Append-only audit records that cannot be modified or deleted outside of the authorized archival process
• Content Security Policy, CORS controls, and browser security headers on all application routes