Evaluation privacy
Evaluation Privacy Notice
Version evaluation-2026.2 · Effective September 8, 2026
This notice describes the evaluation workflow. Final production retention, subprocessor, and jurisdiction terms require the applicable customer agreement and privacy review.
Information used
Passage may process account identity, organization profile, team membership, authority-request details, participant contact information, evidence references, review decisions, and security and audit events needed to operate the workflow. When someone requests the gated sample, Passage also records the acquisition source and the version of their contact consent.
How information is used
- Authenticate people and enforce organization and record access.
- Coordinate the requested authority review and show each person the next action.
- Preserve consent, disclosure, decision, revocation, expiration, and access history.
- Send sample follow-up, product updates, or a walkthrough invitation when the person separately opts in.
- Protect, troubleshoot, and improve the service.
Who can see information
Access depends on the person's verified organization role or a secure, record-bound invitation. Passage separates organization access, participant access, private evidence, and integration access. The receiving institution controls its decision and authorized reviewers.
Service providers
Approved service providers may support authentication, hosting, transactional email, payment, identity or evidence checks, and monitoring. Production use requires an accurate subprocessor and control record.
Your choices
Organization owners can manage team access. Participants can review what they are asked to share and the later actions available to them. Marketing contact requires a separate choice and may be withdrawn through the unsubscribe link in any marketing message. Requests for access, correction, export, or deletion are handled subject to legal, security, and record-retention requirements.