Last updated: October 2026

1. Overview and Scope

RiskoMetrics (“we”, “our”, or “the Platform”) is a specialized enterprise platform for non-financial and operational risk quantification, implementing the Risk Accounting framework through standardized Risk Units (RU) and the continuous Risk Mitigation Index (RMI). This Privacy Policy explains how we collect, use, and protect information when you visit riskometrics.com or access our pilot evaluation portal at access.riskometrics.com.

2. Information We Collect

We adhere to strict data-minimization principles:

Direct Communications: Information provided when you contact us at contact@riskometrics.com regarding pilot onboarding, executive briefings, or system evaluation.
Access Edition Diagnostic Data: Datasets uploaded to the Access Edition evaluation demonstrator are processed exclusively to compute product-level Inherent RUs, run Enhanced Risk and Control Self-Assessments (E-RCSA), and determine Residual RU exposures. Datasets are segregated with cryptographic tenant isolation.
Anonymous System Telemetry: Strictly necessary aggregate performance metrics to maintain platform stability, uptime, and security. We do not use third-party advertising cookies or cross-site tracking scripts.

3. Security & Data Integrity

RiskoMetrics is engineered for regulated financial institutions. Our infrastructure enforces:

End-to-end transport encryption (TLS 1.2+ with HSTS enforcement).
Strict Role-Based Access Control (RBAC) ensuring segregation of duties between operational 1st Line data generators and 2nd Line risk oversight.
Zero cross-tenant data leakage and complete data sanitization upon conclusion of evaluation pilots.

4. Cookie Consent & Tracking

We self-host all core typography and software assets. No runtime requests are made to third-party ad networks or remote font CDNs. Cookies are restricted to essential operational tokens and your explicit consent preferences.

5. Your Rights and Inquiries

Under applicable data protection laws (including GDPR and UK GDPR), authorized institutional representatives have the right to inspect, export, or request immediate deletion of evaluation datasets and contact records. For inquiries, contact contact@riskometrics.com.