Privacy Policy
How MeritVault collects, uses and safeguards personal and assessment data — built on minimization, purpose limitation and institutional ownership.
Overview
Privacy by design
MeritVault is the Assessment Integrity Operating System — a continuous layer that connects controls, evidence and decisions behind high-stakes assessments. Handling that evidence carries real responsibility. This Privacy Policy explains what we process, why, and the choices available to you and your institution.
Last updated: August 2026. This policy applies to the MeritVault platform and its services.
Data
What we handle, and why
Account & user data
Name, email and role information needed to administer your access and attribute actions.
Assessment metadata
Program, control and exception information that describes the assessments you manage.
Evidence artifacts
Records and files that substantiate controls, with their source, actor and timestamp.
Operational logs
Audit logs of actions taken within MeritVault, retained for accountability.
Use
Why we process data
We process data only to deliver the integrity services you signed up for:
- Operate the platform — authenticate users, attribute actions and maintain audit trails.
- Substantiate integrity — connect evidence to controls and preserve provenance.
- Provide visibility — surface control states, exceptions and owner attribution.
- Maintain security and reliability — detect abuse, investigate incidents and meet obligations.
- Improve the service — aggregate, de-identified analytics to improve MeritVault.
Boundaries
What we never do
We never sell personal data
Personal data is not sold to third parties, ever.
No advertising tracking
We do not use your data to build advertising profiles or target ads.
No opaque AI decisions
AI assists human judgment; it never produces an unexplained integrity verdict.
Ownership
Your institution owns its assessment data
Assessment data — controls, evidence and decisions — belongs to the institution that owns the assessment program. MeritVault processes it as a service provider, under your instructions and your agreement.
We do not use your assessment data to train models for other customers, and we do not share it across institutions.
Retention
How long we keep data
We retain data only as long as needed to deliver the service and meet legal, audit and regulatory obligations. Assessment evidence is typically retained for the period set in your agreement, recognizing that high-stakes assessments may need to be defended long after results are issued.
When retention ends, data is deleted or returned in line with your agreement.
Security
How data is protected
MeritVault applies least-privilege access, encryption in transit and at rest, and full audit logging. Read more in our Security overview.
Where MeritVault uses AI, it augments human judgment — never replacing it. See our Responsible AI position.
Rights
Your rights and choices
Depending on your jurisdiction, you may have the following rights over your personal data. Because assessment data is typically governed by your institution, many requests are best made through your administrator.
Access
Request a copy of the personal data we hold about you.
Correction
Ask us to correct inaccurate or incomplete data.
Erasure
Request deletion where we are no longer entitled to retain the data.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing where you have a valid reason.
Further
International transfers, cookies and children
International data transfers
Where data is transferred across regions, we rely on appropriate safeguards such as standard contractual clauses, consistent with the institution's instructions.
Cookies & similar technologies
We use only essential cookies and similar technologies required to operate and secure the platform. We do not use advertising cookies.
Children's data
MeritVault is intended for institutional use and is not directed at children. We do not knowingly collect data from children outside the institutional relationship.
Contact
Changes and contact
We may update this policy as our services evolve. Material changes will be communicated through your account or your MeritVault contact.
Questions about privacy? Contact us through your MeritVault account representative or the contact form on this site.
See MeritVault on your assessment program.
Request a pilot and put the Integrity Operating System to work on one of your high-stakes assessments.
Request a Pilot