What the scorecard collects

The plain version

You answer fifteen questions. We email you a personalized PDF report and may follow up with relevant content or an offer to talk. We keep your answers and contact details so we can do that and so we can publish anonymized peer-benchmark statistics. You can ask us to delete everything at any time.

What we collect

• Contact details: the email, first name, company name, and role you submit on the lead-capture step.
• Scorecard answers: your No / Partial / Yes answers to the fifteen questions, the resulting overall score, the per-pillar subscores, and the assigned tier.
• Attribution: UTM parameters in the URL you arrived from (utm_source, utm_medium, utm_campaign, utm_content, utm_term) and your HTTP referrer, if your browser sends one.
• Technical metadata: a session identifier we generate in your browser, the timestamps when you start and finish, and standard request metadata (user agent, IP-derived country) needed to deliver the page.

We do not ask for, collect, or store your phone number, postal address, payment details, or any sensitive personal information.

Why we collect it

• To compute your score and deliver your personalized PDF report.
• To send you tier-appropriate follow-up content (the 90-Day AI Starter Playbook for lower tiers, a strategy-call invitation for the middle tier, or a paid AI Roadmap Sprint scope for higher tiers).
• To compute and (eventually, at 1,000+ completions) publish anonymized peer-benchmark statistics in aggregate. Individual scorecard responses are never shown publicly.
• To respond to you if you reply to one of our emails.

Our legal basis under GDPR is your consent (you submit the form voluntarily) and our legitimate interest in operating the scorecard and following up with prospective clients.

Who else sees it

Your data is stored and processed by a small set of vendors that help us run the scorecard. Each is bound by a data processing agreement appropriate to its role:

• Vercel — hosting and request logs.
• Supabase — database for scorecard responses and contact details. Hosted in the United States.
• Resend — transactional email delivery for your PDF report and tier-appropriate follow-ups.
• Mailchimp — email marketing platform where we store your contact details, the tier you landed in, and your overall + per-pillar scores so we can send tier-appropriate follow-ups. Hosted in the United States.

We do not sell or rent your information to anyone. We do not feed it to advertising networks.

How long we keep it

We keep your scorecard response and contact details for as long as we have an active relationship with you, and for up to 24 months after our last interaction. You can ask us to delete it sooner — see below.

Your rights

Under GDPR (and similar regimes including CCPA), you have the right to:

• Get a copy of the data we hold about you.
• Have it corrected if it’s wrong.
• Have it deleted.
• Object to it being used for marketing — every email we send includes an unsubscribe link.
• Withdraw consent at any time, going forward.

To exercise any of these rights, email us at hello@agathosai.com. We’ll confirm and act within 30 days.

Cookies and tracking

We do not set marketing or advertising cookies. We do not run third-party analytics tags on this scorecard. The session identifier is generated in your browser and used only to correlate your submission with the report we send you.

Methodology

The scorecard’s six-pillar framework is distilled from cross-framework consensus across Gartner, McKinsey, BCG, MIT Sloan, and the Big Six tech vendors — built on the public-domain NIST AI Risk Management Framework, GAO AI Accountability Framework, and NIST 600-1 GenAI Profile, plus the CC BY 4.0 Jöhnk academic readiness model. We stripped out MLOps, model drift, and AI operating models because the audience is buying AI, not building it.

Pillars 2 (Use Cases & Value) and 6 (Measurement & Momentum) carry 1.5× weight on the total score because outcomes signal readiness more reliably than capabilities. The peer-benchmark sentence uses a deliberately conservative modeled SMB baseline until 1,000 real responses replace it.

Updates to this notice

If we change what we collect, who we share it with, or how long we keep it, we’ll update this page and bump the “last updated” date at the top. Material changes will be flagged in the email you receive when your report lands.

Contact

AgathosAI
Email: hello@agathosai.com
Web: agathosai.com