Cortera.

Privacy & Data Handling

How Cortera handles your information.

Draft notice. This is a pre-production privacy and data handling notice for the Cortera pilot. It describes current intent and planned controls, is subject to final legal review, and will be replaced by a definitive notice before commercial launch.

What Cortera collects

  • Contact details you submit: name, work email, company, website, country, and role.
  • Assessment answers describing your workflows, systems, goals, and current AI usage.
  • Basic product usage information needed to operate the assessment, such as progress state and timestamps.

What customers should not submit

  • Passwords, API keys, tokens, or any access credentials.
  • Patient records, clinical documentation, or other special-category personal data.
  • Production datasets, customer databases, or confidential contracts.
  • Describe categories of data instead of sharing records. The assessment is designed to work at that level.

How assessment data is used

  • Your responses are used to generate your readiness report and 30-day plan.
  • Aggregated, non-identifying insights may be used to improve the assessment methodology.
  • Your responses are not used to train third-party foundation models.
  • Human review may be applied to higher-risk flags or early reports before delivery.

Planned retention and deletion controls

  • Assessment data is planned to be retained for the duration of the customer relationship plus a defined archival period.
  • Customers will be able to request deletion of their assessment data and generated reports.
  • Backups follow their own rotation schedule and are deleted on expiry.

Subprocessors and AWS hosting

  • The platform is planned to run on Amazon Web Services in EU Regions.
  • AWS services in scope include hosting, storage, managed PostgreSQL, email delivery, model access via Amazon Bedrock, and logging.
  • A current subprocessor list will be published before commercial launch.

Customer rights and contact

  • You can request access to, correction of, or deletion of the personal data you have provided.
  • You can withdraw from the pilot at any time and ask us to remove your application.
  • Contact: hello@cortera.eu

Cortera provides a readiness and prioritization assessment. It does not provide legal advice, certification, or a formal conformity assessment, and it makes no claim of certification under ISO 27001, SOC 2, HIPAA, or any other scheme.