Privacy notice

Who we are

This is a demonstration of DOSSIER, an investigative intelligence platform. It is not intended for live personal data. A production operator must publish its own controller identity, contact details, lawful bases, retention periods, and processor information before inviting users or processing investigative material.

What this site collects

If you only browse this site, we collect nothing about you: there are no marketing cookies, no analytics trackers, and no advertising pixels.

If you hold a platform account, we process three things. Your account details — name, email address, role, and organisation — so we know who you are and what you may access. A session cookie, set when you sign in, which is strictly necessary and used solely to keep you signed in. And audit logs recording sign-ins and significant actions on the platform, kept because an evidential system must be able to show who did what and when.

What we do not do

We do not sell personal data, use it for marketing, or share it with advertising or analytics providers.

Investigative data is different

Data processed in the course of an investigation — subjects, findings, evidence, and reports — is governed by the engagement terms and privacy notice of the organisation operating the production deployment, not by this demonstration page.

Your rights

Under UK data protection law you may ask what personal data we hold about you and ask for it to be corrected or deleted, subject to the legal and professional obligations that require some records to be retained. In production, requests must be directed to the organisation identified in that deployment's privacy notice. You may also complain to the Information Commissioner's Office.