People before datasets
Consent, privacy and responsible access
The core scoring service is designed to score explicitly consented responses without persisting participant identifiers or raw answers. Any future researcher workspace that retains study responses must operate under separate, clearly disclosed data-handling policies.
- Obtain informed, purpose-specific consent before collecting assessment answers.
- Keep organizations, studies and investigators isolated by authorization boundaries.
- Minimize personal information and provide retention, access, export and deletion controls.
- Publish submitted instruments only when their authors can authorize sharing; keep private instruments private.
- Use documented security reviews, HTTPS, server-side credentials, safe rate limits, and redacted logs before Internet release.
- Make participation voluntary. Ordinary RFC-AI community reading and contribution must never require a hidden assessment.