Privacy notice

EvidenceReady is designed for sensitive evidence workflows with controlled handling and conservative internal review outputs.

What we collect during enquiry and intake

  • Contact details you submit in the intake flow (name, work email, optional phone).
  • Service context you provide (pathway, service type, urgency and review trigger).
  • Generated case references used to continue your evidence-check workflow.

How evidence is handled

  • Uploaded files are processed in a private case workspace.
  • Document retrieval for admin review uses short-lived admin access links.
  • Internal review outputs are admin-only and are not shown on provider-facing token pages.
  • Evidence items, framework mappings and candidate findings are designed for human-reviewed workflow.
  • Provider upload links should be treated as private case links and shared only with authorised people.

Current first-pilot limitations

  • Malware scanning is not yet presented as a completed product control.
  • Scanned PDFs and image-only files may require OCR or manual review and may not extract automatically.
  • AI-assisted paths are gated and are not provider-facing by default.
  • Self-serve accounts, checkout and subscriptions are not part of the current pilot workflow.

Analytics usage

Optional public-site analytics is disabled unless a real approved integration is explicitly configured. Where configured, it runs only after consent and only on public marketing pages. It never runs in provider, founder, invitation, case, private-report or download routes. You can decline or withdraw without losing EvidenceReady functionality. See the Cookie Policy for the current technology inventory.

Website processors and transfers

EvidenceReady uses service providers for hosting and controlled application delivery. Their processing locations may include countries outside the UK, subject to the provider's contractual and legal safeguards. We do not claim that all website processing occurs only in the UK. Optional analytics, where enabled and accepted, uses Vercel as the public-site analytics provider.

Data use and retention approach

EvidenceReady does not sell personal data. Information is used to provide evidence-readiness support, service communication and product improvement. Data is intended to be retained only for the period needed to run and support the workflow, then removed in line with internal retention controls.

Correction, deletion and pilot support

During a manual pilot, report corrections, publication revocation, evidence export and deletion requests are handled through the agreed pilot support route. For privacy-related requests, use the contact below and include the case reference if one has been issued. Do not include resident personal data in email. Response times and service levels are agreed during pilot onboarding rather than promised by this public website.

Payments and refunds during pilot

EvidenceReady does not currently offer self-serve checkout on this website. Paid pilot scope, price, payment route, refund expectations and support route should be confirmed manually before paid work starts. No self-serve card checkout or subscription billing flow is provided on this site.

Important service note

EvidenceReady is independent and is not affiliated with or endorsed by CQC, Ofsted or any regulator. EvidenceReady provides internal readiness indicators and candidate findings for human review. It is not a compliance conclusion and does not guarantee inspection outcomes.

Contact

For privacy-related enquiries, contact: privacy@evidenceready.co.uk

Necessary technology is always active. Optional analytics is never used in founder, provider, invitation, case or private-report routes.

Necessary

Security, authentication and remembering your privacy choice.

Always active

Analytics

No optional analytics technology is currently configured for Production.

Disabled

Policy version 1.0. Choices are remembered for up to 180 days and requested again when the policy materially changes.