Privacy Policy

The TechForward M-26-14 Readiness Check (the "Assessment") is provided by TechForward LLC ("TechForward", "we", "us"). This policy covers the Assessment at techforward.ai/m-26-14-assessment, including its results, the brief and draft plan you can download, its Contact and FAQ pages, and the summary we email you if you ask for one. Other TechForward websites have their own policies.

• Your answers stay in your browser. Your answers, your place in the assessment and any optional details you add for your draft plan are used to calculate your results in your browser, and saved in your browser's storage so you can resume (see Browser storage below). They are only sent to us if you choose to email yourself your results: our server then uses them to build the email and any PDFs you selected, and does not store them.
• Your email and organization, if you email yourself your results. Seeing your full results and downloading the brief and draft plan doesn't require an email address. If you choose to email yourself a summary, we collect the email address you enter and, if you provide it, your agency or organization name.
• A summary of your results. When you email yourself your results, we store a summary together with your email: your overall maturity level, the level for each of the five maturity elements, your bottleneck element, how many of the 11 baseline activities you fully meet, and whether time synchronization needs attention.
• Messages you send us. If you use the Contact form, we collect your name, email address, subject and message, and email them to our team so we can reply. Messages are not stored in the Assessment's database.
• Page visits. Our hosting platform records which pages of the Assessment are visited, so we can see how it's used.
• Technical information. Like most websites, our hosting and security providers process information such as your IP address, browser type and the pages you request, in order to deliver the site and protect it from abuse.
• Call bookings. If you book a call, you do so through Calendly, which collects the details you enter there under its own privacy policy.

• To calculate and show your results, and to build the readiness brief and draft plan you download. This happens in your browser.
• To email you your results, if you ask: one email to the address you entered, with the readiness brief and/or draft Agency Logging Plan attached as PDFs if you selected them.
• To send you follow-up emails with M-26-14 guidance and updates, only if you tick the follow-up box. These come from our email platform, Mailchimp, and every one has an unsubscribe link.
• Whether or not you tick the box, a member of our team may contact you personally about your results or your message. You can ask us to stop at any time (see Your choices).
• To reply to messages you send us through the Contact page.
• To understand how the Assessment is used and to improve it and our services.
• To keep the Assessment secure and prevent misuse, including checking that saved results are valid.

We do not sell or rent your information, and we do not use it for advertising.

We do not use advertising cookies. The Assessment keeps these items in your browser's own storage, on your device only: your progress while you're taking the assessment (answers, current question and optional plan details), which is cleared when you finish; your completed results, kept only until you close the tab; and, if you use the Contact form, the times of your recent messages, used to limit how many can be sent per hour. You can clear these at any time through your browser settings, or with Start over on the results page. Visitors don't sign in; a sign-in token is stored only when a member of our team signs in to manage the Assessment. Our hosting and security providers may use strictly necessary technical identifiers to run and protect the site.

We rely on trusted providers that process information on our behalf to run the Assessment:

• Base44: application hosting, the server functions that build and send your results email, the database that stores the email and results summary of people who email themselves their results, page-visit records, and, as a backup, delivery of Contact form emails.
• Twilio SendGrid: delivering your results email and Contact form emails.
• Mailchimp (Intuit): our email platform. When you email yourself your results or send us a message, we add your email, name (Contact form), organization and results summary to our Mailchimp audience, marked with which form you used. Only people who tick the follow-up box are subscribed to follow-up emails; others are stored there but not sent marketing email.
• Cloudflare and GoDaddy: delivering and securing techforward.ai and the Assessment's files.
• Google Fonts: the site's typeface. Your browser loads font files from Google.
• Calendly: scheduling calls, if you choose to book one.

• Your email, organization name and results summary are kept for up to 24 months after you email yourself your results, or until you ask us to delete them, whichever comes first.
• Contact messages are kept in our email for as long as needed to respond and follow up with you.
• Your contact record in Mailchimp is kept until you unsubscribe and ask us to delete it, or for the same 24 months, whichever comes first.
• Your individual answers are not stored by us. If you email yourself your results, our server uses them only to build that email and its PDFs. In your browser, in-progress answers are cleared when you finish, and completed results are cleared when you close the tab.

• You can use the Assessment and see your results without giving us an email address.
• Follow-up emails are optional: leave the follow-up box unticked and you won't get them.
• You can unsubscribe from follow-up emails with the link in any of them, or ask us to stop following up with you at any time through our Contact page.
• You can ask us to access, correct or delete your email, organization name, results summary or messages through our Contact page. Tell us the email address you used so we can find your information.

The Assessment is intended for professionals responsible for federal logging and cybersecurity programs and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has sent us information, contact us and we will delete it.

We use reasonable safeguards, including encrypted connections (HTTPS), a database that only authorized members of our team can read, and server-side checks on everything saved through the Assessment. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this policy as the Assessment changes. We'll post the new version here and update the "Last updated" date above.

Questions about this policy or your information? Reach us through our Contact page.