Privacy policy: being finalised.

The privacy policy and the data processing agreement for checkii.ai are with counsel. Until they are published here, this page states what we process today and who to contact.

What we process now

• Controller: MCR Technologies Limited, company number 12319980, England and Wales, trading as checkii.ai. Data protection contact: info@checkii.ai.
• Website and storefront: the name, work email, company and target you enter when you request access or subscribe, held to provision and support your workspace. Card details go to Stripe and never reach our servers.
• Console accounts: your email, name, tenant membership and sign-in events, plus the audit record of what you did in the workspace. Password-reset mail is sent from our own domain and contains a single-use link; the link appears in no log.
• Assessment content: the targets, repositories, findings, evidence and reports in your tenant. We process these on your instructions as a processor; they are encrypted at rest with a per-tenant key and isolated per tenant in the database. Hosted data is processed in the United Kingdom and the European Union.
• Sub-processors today: Amazon Web Services (hosting, console email), Cloudflare (website, DNS), Stripe (payments), Resend (storefront email), GitHub (repository verification app). The formal list is in preparation.
• Your rights: access, correction, erasure and objection requests go to info@checkii.ai. We answer within one month.

When the policy is published, this page is replaced by it and the date of publication is shown here. Nothing on this page is legal advice.