DATA SECURITY &
CONFIDENTIALITY COMMITMENT

Privacy by Design • Confidential by Default

Document Version 1.0

Effective Date [Enter Date]

Trust & Verification trust.traits4xl.com

Traits4XL follows a privacy-by-design, data-minimisation and confidentiality-first approach in delivering its assessment, diagnostic, leadership development and mentoring services.

Data Minimisation & Pseudonymisation

Traits4XL collects only information required to provide the agreed service. Participants are identified within the assessment environment through a pseudonymous/alphanumeric identifier rather than their name wherever the service architecture permits.

Participants are advised not to enter unnecessary personal, financial, medical or confidential information in free-text responses.

Participant Confidentiality & Organisation Access

By default, individual Participant Data is not disclosed to the Organisation.

Where Organisation access is expressly authorised as part of the agreed programme, it is limited to information required solely for the agreed development purpose and may include:

01 — Aggregated Group Data Cohort-level patterns, trends and organisational insights.

02 — Leadership Archetype Applicable leadership and cultural archetype information.

03 — Development Index Indicators intended solely for development, coaching and mentoring.

Raw Participant responses and verbatim assessment evidence are never disclosed to the Organisation.

Individual trait scores or detailed index information will not be provided unless specifically included within the agreed service and permitted by applicable law.

Minimum Group Protection

Traits4XL applies a minimum cohort size of eight (8) Participants for group-level reporting, unless otherwise agreed, to reduce the possibility of identifying an individual from aggregated results.

Additional safeguards may be applied where a smaller subgroup could reasonably lead to identification.

AI Privacy & Stateless Processing

Traits4XL relies on API-based AI integrations for AI processing and does not use consumer chat interfaces for processing Participant assessment data.

Participant prompts and responses are not retained as conversational memory between Participants or assessment sessions.

Participant Data submitted through Traits4XL's AI processing is not used by Traits4XL for training or fine-tuning AI models.

Where supported by the applicable AI infrastructure and contractual configuration, Traits4XL uses Zero Data Retention (ZDR) or equivalent data-retention controls for AI processing.

Participant information from one assessment is not intentionally used as context for another Participant. Traits4XL does not sell Participant Data or use it for advertising.

Security & Access Control

Traits4XL applies appropriate technical and organisational safeguards, including:

🔐 Encrypted
Transmission

👤 Controlled
Access

🛡 Least-Privilege
Access

✓ Security
Safeguards

Third-party infrastructure or AI service providers may process limited information where necessary to deliver the contracted service and are subject to applicable privacy and security controls.

Retention & Deletion

Traits4XL follows a limited-retention approach:

Raw assessment responses Processed only for the period necessary to provide the assessment/service and not intentionally retained as a permanent record.

Scores & Reports Generally deleted or irreversibly anonymised within 30 days after completion of the applicable service or agreed data-delivery process.

Identity Mapping Participant identity-to-identifier mapping is deleted within 30 days where such mapping is maintained by Traits4XL.

Limited information may remain in secure backups or records where required for legal, contractual, security or dispute-resolution purposes and will remain subject to appropriate safeguards.

Appropriate Use of Traits4XL Outputs

Traits4XL outputs are designed exclusively for leadership development, coaching, mentoring and organisational improvement.

They are not medical, psychiatric or clinical diagnoses.

Traits4XL outputs shall not be used as the basis for hiring, promotion, compensation, disciplinary or termination decisions.

Organisation-facing reports do not provide clinical or quasi-clinical characterisations of Participants.

Participant Transparency & Organisation Responsibility

The Organisation is responsible for providing Participants with appropriate notices and obtaining any consent, authorisation or other lawful basis required for the programme.

Traits4XL will communicate its Participant confidentiality and Organisation-disclosure principles to Participants at the start of the programme.

The Organisation shall not attempt to circumvent Traits4XL's confidentiality, cohort-size or re-identification safeguards.

Reasonable Security Commitment

Traits4XL maintains reasonable and proportionate security and confidentiality controls appropriate to the service.

No internet-connected system can guarantee absolute protection against every cyberattack, technical failure or unauthorised access. Accordingly, Traits4XL does not make an absolute zero-risk security guarantee.

These commitments form part of the applicable Traits4XL Data Security & Confidentiality Agreement.

Privacy by Design. Confidential by Default. Traits4XL is committed to protecting participant confidentiality while enabling responsible leadership development.

FORMAL ACKNOWLEDGEMENT

The parties acknowledge that they have read, understood and agree to the above Data Security & Confidentiality commitments, which form part of the applicable service agreement.

For Traits4XL

Name

Designation

Signature

Date

For the Organisation