What is a Privacy Assessment?

A Privacy Assessment is a qualitative evaluation of how your AI system handles personal, sensitive, or confidential data. It focuses on identifying potential privacy risks that could arise from the way data is collected, processed, stored, and output by the system.

Privacy risks can lead to regulatory violations, data exposure incidents, and loss of trust with your users. Our Privacy Assessment helps you ensure that your AI systems comply with data protection expectations and are designed to minimize unnecessary data access or disclosure.

Why privacy matters for AI systems

AI systems often process large volumes of data, and that data frequently includes personal or sensitive information. The way an AI system uses this data - both in training and in production - can create privacy risks that are not always obvious.

A model might memorize personal data from its training set. A chatbot might expose sensitive information in its responses. An AI workflow might pass personal data through multiple systems without appropriate controls. Our Privacy Assessment is designed to catch these kinds of risks before they become real problems.

What we evaluate

Our Privacy Assessment uses structured questions to evaluate your system's privacy posture across several areas:

• What types of data the system processes or references
• How inputs and outputs may expose personal or sensitive information
• Whether workflows and agent behavior could lead to unintended data leakage
• Whether task execution patterns increase privacy risk
• Whether appropriate controls and safeguards are in place throughout the data lifecycle

The assessment is qualitative - your team provides answers about the system's data handling practices, and the platform identifies areas where privacy controls may be insufficient or where additional safeguards are needed.

How privacy connects to other assessments

Privacy risk is one of the six dimensions we evaluate during Risk Mapping. The Privacy Assessment goes deeper, providing a focused, detailed evaluation of your system's data handling. Results from the Privacy Assessment feed into your overall risk profile and can trigger Privacy Mitigation activities when gaps are identified.

What you get from a Privacy Assessment

• A structured review of how your system handles personal and sensitive data
• Identification of areas where privacy controls may be insufficient
• A documented record for regulatory compliance and audit purposes
• Clear inputs for privacy mitigation planning and remediation