Evaluation privacy

Evaluation Privacy Notice

Version evaluation-2026.1 · Effective August 27, 2026

This notice describes the evaluation workflow. Final production retention, subprocessor, and jurisdiction terms require the applicable customer agreement and privacy review.

Information used

Passage may process account identity, organization profile, team membership, authority-request details, participant contact information, evidence references, review decisions, and security and audit events needed to operate the workflow.

How information is used

• Authenticate people and enforce organization and record access.
• Coordinate the requested authority review and show each person the next action.
• Preserve consent, disclosure, decision, revocation, expiration, and access history.
• Protect, troubleshoot, and improve the service.

Who can see information

Access depends on the person's verified organization role or a secure, record-bound invitation. Passage separates organization access, participant access, private evidence, and integration access. The receiving institution controls its decision and authorized reviewers.

Service providers

Approved service providers may support authentication, hosting, transactional email, payment, identity or evidence checks, and monitoring. Production use requires an accurate subprocessor and control record.

Your choices

Organization owners can manage team access. Participants can review what they are asked to share and the later actions available to them. Requests for access, correction, export, or deletion are handled subject to legal, security, and record-retention requirements.