Privacy Policy
Privacy Policy
Effective July 2026 · Axiom Specialty, Inc.
Axiom Accreditation (“we,” “us”) is an agent-certification service operated by Axiom Specialty, Inc. This policy explains what we collect when you use Axiom Accreditation to assess an AI agent, how we use it, and the choices you have.
1What we collect
Account & billing.Name, work email, company, and payment details (processed by Stripe, we don't store card numbers).
Assessment inputs.The agent configuration you submit for certification, endpoint URL and auth, model and tool metadata, and any wrapper you provide, and the conversations and tool calls produced when we run your agent through our scenarios (“transcripts”).
Usage. Standard logs (IP, timestamps, request metadata) to operate and secure the service.
2Do not submit real end-user or sensitive data
Axiom Accreditation tests your agent in our simulated environment with synthetic users and data. You should not point us at production systems containing real customer PII, PHI, or regulated data, and you should not feed such data into the agent during an assessment. You are responsible for the data your agent exposes during a run.
3How we use it
To run assessments, score them, issue certificates, operate your account, provide support, secure the service, and improve our scenarios and methodology. We use an LLM to grade transcripts (see subprocessors). We do not sell your data, and we do not use your confidential transcripts to train third-party models.
4Sharing & the verification page
A certificate's public verification page shows only what you choose to make public (agent name, grade, validity, config hash), and only if you opt in. Transcripts and the full report are never public. With your instruction, a certificate's result may be shared with Axiom's underwriting to inform a deployer's AI-liability assessment.
5Subprocessors
We rely on: Anthropic (the LLM judge that grades transcripts), Supabase (database), our hosting/cloud provider, and Stripe (payments). Each processes data only to provide their service.
6Retention & security
Transcripts and reports are confidential, access-controlled, and retained for as long as your certificate is active plus a reasonable audit period, then deleted or anonymized. We use encryption in transit and at rest and least-privilege access. No method is perfectly secure.
7Your choices
You can access, correct, export, or delete your account data, and withdraw a certificate from public verification, by contacting us. We honor applicable data rights (e.g., GDPR/CCPA) where they apply.
8Changes & contact
We'll post changes here and update the effective date. Questions: privacy@axiomspecialty.com.