Privacy Policy

Last updated: May 2026
Introduction

Clariden ("Clariden," "we," "our," or "us") acts as a data controller with respect to personal information collected through our websites, communications, business operations and related services. Clariden may also act as a data processor on behalf of enterprise customers pursuant to contractual agreements governing customer deployments and evaluation environments. Where applicable, Clariden seeks to process personal information in accordance with relevant privacy and data protection laws, including the GDPR, UK GDPR and similar legal frameworks.

GDPR and international privacy rights

Clariden ("Clariden," "we," "our," or "us") provides software and services designed to support regulatory evaluation, compliance review, records management, and audit-related workflows.

This Privacy Policy explains how we collect, use, disclose and protect information when individuals visit our websites, communicate with us, request demonstrations, subscribe to updates, or otherwise interact with our services. This Privacy Policy does not modify or supersede contractual data handling obligations agreed separately with enterprise customers.

Scope

This Privacy Policy applies to: visitors to clariden.ai and related websites, prospective customers and business contacts, webinar, event and marketing communications, users interacting with Clariden-hosted environments, information submitted through contact or demo request forms.

Separate contractual agreements may govern customer deployment environments, evaluation data, and enterprise data processing activities.

Information we collect
Information you provide directly

We may collect information that you voluntarily provide, including: name, business email address, organization namej, ob title, contact information, communications submitted through forms or correspondence, materials voluntarily shared during demonstrations or support interactions.

Usage and technical information

We may automatically collect limited technical and usage information, including: browser type and version, operating system, device information, IP address, referral source, pages viewed, timestamps and session information, general interaction and performance analytics. This information helps us maintain, secure and improve our services.

Customer-provided materials

Enterprise customers may choose to upload or process documents, procedures, records, policies, standards or other materials within Clariden environments.

Clariden processes such materials solely to provide contracted services and functionality. Customer-provided materials are not used to train public foundation models or shared AI systems.

How we use information

We may use collected information to: provide and operate our services, respond to inquiries and demo requests, authenticate users and maintain platform security, improve system performance and usability, communicate product updates or operational notices, maintain compliance, audit and security records, investigate abuse, misuse or unauthorized activity, or comply with legal or regulatory obligations.

We do not sell personal information.

AI and evaluation workflows

Clariden is designed to support structured evaluation of regulatory requirements, procedures, records and related materials. Clariden may utilize third-party infrastructure, document processing, embedding, orchestration or AI model providers as part of system operation.

Where customer materials are processed through third-party services, Clariden seeks to apply architectural, contractual and operational controls designed to reduce unnecessary data exposure. Clariden does not use customer-provided documents, procedures or records to train public foundation models.

Legal basis for processing

Where required under applicable privacy laws, including the GDPR and UK GDPR, Clariden processes personal information based on one or more of the following legal bases: legitimate business interests, contractual necessity, compliance with legal obligations, consent, where required, or protection of legitimate operational or security interests.

Clariden seeks to limit processing activities to those reasonably necessary for operational, security, compliance and service delivery purposes.

GDPR and EEA/UK rights

Individuals located in the European Economic Area, United Kingdom or other jurisdictions with similar legal protections may have rights relating to their personal information, including rights to: request access to personal information, request correction of inaccurate information, request deletion of personal information, object to certain processing activities, restrict processing, request portability of personal information, withdraw consent where processing is based on consent, or lodge complaints with applicable supervisory authorities.

Clariden will seek to respond to applicable requests within legally required timeframes.

International data transfers

Clariden and its service providers may process information in multiple jurisdictions. Where personal information is transferred internationally, Clariden seeks to implement appropriate safeguards designed to protect transferred information in accordance with applicable law. Such safeguards may include: contractual protections, vendor security obligations, data processing agreements, European Commission Standard Contractual Clauses or similar transfer mechanisms where appropriate.

Data processors and subprocessors

Clariden may utilize third-party providers for infrastructure, storage, analytics, AI processing, document processing, authentication, communications or operational support.

Where Clariden acts as a processor on behalf of enterprise customers, Clariden seeks to maintain appropriate contractual and operational controls governing subprocessors and data handling activities.

Legal basis for processing

Where applicable under relevant privacy laws, Clariden processes information based on: legitimate business interests, contractual necessity, legal obligations, or consent, where required.

Information sharing

We may share information with: infrastructure and hosting providers, analytics and operational service providers, security and fraud prevention providers, professional advisors and auditors, government authorities where required by law, or successor entities in connection with mergers, acquisitions or corporate restructuring.

We require service providers to process information only for authorized purposes and subject to appropriate confidentiality and security obligations. We do not sell personal information to third parties.

Data retention

Clariden retains information only for as long as reasonably necessary to: provide services, maintain security and operational integrity, comply with legal obligations, resolve disputes, or enforce agreements. Retention periods may vary depending on contractual, operational or regulatory requirements.

Security

Clariden employs administrative, technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration or destruction. Security measures may include: encryption in transit, encryption at rest, logical access controls, authentication and authorization controls, activity monitoring and logging, or vendor and infrastructure security reviews.

No system can guarantee absolute security.

International transfers

Clariden and its service providers may process information in multiple jurisdictions. Where required, Clariden seeks to implement appropriate safeguards for international data transfers.

Additional privacy rights

Depending on applicable law, individuals may have rights relating to their personal information, including rights to: access information, correct inaccurate information, request deletion, object to certain processing, restrict processing, request data portability, or withdraw consent where processing is based on consent.

Requests may be submitted using the contact information below.

Cookies and analytics

Clariden may use essential cookies, analytics technologies and related tools to maintain website functionality, understand usage patterns and improve operational performance.

Where required by applicable law, Clariden will seek consent before deploying non-essential cookies or tracking technologies. Users may independently manage cookie preferences through browser controls.

Third-party websites

Clariden websites or communications may contain links to third-party websites or services. Clariden is not responsible for the privacy or security practices of third-party services.

Changes to this Privacy Policy

Clariden may update this Privacy Policy periodically. Updated versions will be posted on this page with a revised effective date.

Contact

Questions regarding this Privacy Policy may be directed to: privacy@clariden.ai. Additional company contact information may be provided in commercial agreements or future corporate disclosures.