Terms of Service
These Terms (“Agreement”) govern your use of ReaDI-Watch’s website at https://readi-watch.com, (the “Site”) and ReaDI-Watch’s Research, Development and Innovation Platform at https://app.readi-watch.com. Except where specifically noted below, all references to the Platform include the Site as well. ReaDI-Watch’s Privacy Policy and Data Management Policy are incorporated by reference into these Terms and details how we collect, use, and protect information.
1. Parties
You (“your”), as the individual accessing the Site and/or Platform.
“The Company”, which expression shall where the context so admits or requires include its subsidiaries, affiliates and holding company. Given that the Platform is intended as a Business to Business offering, this Agreement anticipates that you are a member of said Company and By accessing or using the Platform, you represent and warrant that you have the legal right to do so and have the power to enter into a binding contract with us – either for yourself or on behalf of the Company on whose behalf you are using the Platform. YOU ARE REQUIRED TO AFFIRMATIVELY ACCEPT THESE TERMS WHEN INITIALLY SIGNING UP TO ACCESS THE PLATFORM.
ReaDI-Watch Ltd., at Curtlestown, Enniskerry, Wicklow, hereafter referred to as “The Service Provider”.
2. Services
The Service Provider is engaged in the business of offering access to a cloud-based web-application (“The Platform”). This Agreement contemplates only the usage of the Site and the Platform offer as-is, and makes no guarantees or representations as to the provision or availability of any other service that may be provided by Service Provider as an ancillary benefit to its clients.
You do not need to pay to access the Site, but the Platform is only available with a paid plan (a “Subscription”). Prevailing subscription levels, features, and pricing are available at https://readi-watch.com/pricing-cards, or in a supplemental agreement made with ReaDI-Watch.
Fees for Subscriptions (“Subscription Fees”) are due within 30 days for each billing period, with the initial payment due 30 days after adding a Subscription to your Account (the “Subscription Start Date”). All Subscription Fees and other payments or credits related to your Account will be made in accordance with the charges and billing terms in effect when such payment is due or funds are received. We may change our fees and billing practices at any time, either by posting Otnotice of such change on the Site or notifying you within the Platform, provided that any pre-paid fees for Services not yet completed will not be affected by such change.
Subscriptions will automatically renew at the rates then in effect until cancelled by contacting us. If we do not receive payment within thirty (30) days of the date such payment was due or we may terminate your Subscription.
The Company agrees that The Service Provider cannot accept liability for the results of an R&D Tax Credit (SR&ED), Grant Funding or other audit or appeal.
The Service Provider uses Stripe for some payment services. By paying for a Subscription, The Company agrees to be bound by Stripe’s Privacy Policy: https://stripe.com/us/privacy/ and authorises The Service Provider and Stripe to share any information and payment instructions you provide with your Payment Provider and any other Third Party Service provider(s) solely required to complete your transactions.
3. Termination
Any of the Parties may terminate this Agreement: on 30 days’ written notice to the other, provided that where a Service Agreement has a remaining term exceeding 30 days at the time notice is given, termination shall take effect upon the expiry of that Service Agreement’s term unless otherwise agreed in writing by the Parties; or in the event of a material breach by such other party of any of the provisions of this Agreement, on 10 days’ written notice to the other, unless (at the discretion of the non-breaching party) such breach is remedied (if capable of remedy) within the period of this notice.
The Company shall be entitled to terminate this Agreement on immediate written notice to The Service Provider if The Service Provider shall at any time be guilty of dishonesty or incompetence or any misconduct or wilful neglect in the performance of the Services. Upon termination of this Agreement, any active Subscriptions will terminate, save that any Service Agreement with a fixed term that extends beyond the date of termination shall continue until its natural expiry, at which point it shall not be renewed.
4. Use & License
With respect to the Platform, You and The Company will not: except to the extent such rights cannot be validly waived by law, disassemble, decompile, reverse-engineer, copy, translate or make derivative works, transmit any content or data that is unlawful or infringes any intellectual property rights, or circumvent or endanger its operation or security.
5. Other Provisions
Governing Law: This Agreement shall be governed by and construed in accordance with the laws of the Republic of Ireland, without reference to the choice of law provisions thereof. This Agreement will be fully dealt with using the English language.
Severability: If any term or provision of this Agreement is held to be illegal or unenforceable, the validity of the remainder of this Agreement shall not be affected.
Force Majeure: The Service Provider shall not be deemed to be in default under this Agreement as long as its failure to perform any of its obligations hereunder is occasioned solely by fire, labour disturbance, acts of civil or military authorities, or any similar cause not known to The Service Provider at the time of execution hereof and beyond The Service Provider’s reasonable control.
Assignment: Neither this Agreement, nor any interest hereunder shall be assignable by either party without the prior written consent of the other party. Notwithstanding the foregoing, The Service Provider may assign this Agreement to its parent, subsidiary or affiliate company. The Service Provider shall also have the right to assign this Agreement in case of a sale of the relevant business of The Service Provider to a third party taking over such business.
Updates: We may change these Terms at any time. When we do so, we will make a new copy of the Terms available on this page and will also inform you through the Platform, as applicable. Any changes to the Terms will be effective immediately for new users and five (5) days after notice of such changes is posted on the Site for existing users.
Data Processing Addendum: The parties acknowledge and agree that, to the extent that the provision of the services under these Terms involves the processing of “personal data” as defined by the General Data Protection Regulation 2016/679 (“EU GDPR”) or the EU GDPR as it forms part of the law of the United Kingdom (“UK GDPR”), the terms of the Data Processing Addendum (as updated from time to time) shall apply. Download our signable DPA here, and send it to dbyrne@readi-watch.com for signature.
Privacy Policy
ReaDI-Watch Ltd. operates www.readi-watch.com (the "site") and app.readi-watch.com (the “platform”). This page informs you of our policies regarding the collection, use and disclosure of personal information we receive from users of the site and platform.
The scope of this Privacy and Cookie policy is solely personal information. The companion Data Management Policy expands on this policy, and covers non-personal information (e.g. Company data) as well as operational processes.
We use your personal information only for providing and improving the site and platform. By using the site, you agree to the collection and use of information in accordance with this policy.
How We Collect Your Information
Information You Provide
While using our site, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to your name and email address ("personal information").
Information Collected by Technology
Like many site operators, we collect information that your browser sends whenever you visit our site ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our site that you visit, the time and date of your visit, the time spent on those pages and other statistics.
We use third party analytics services (“Analytics Services”) to help analyse how users use the Platform. We may receive reports based on these parties’ use of these tools on an individual or aggregate basis, and we use this information to improve the Platform. By using the Platform, you consent to the processing of data about you by Analytics Services in the manner and for the purposes set out above. See our Subprocessors list for a full list of Analytics Services we utilise.
Cookies
Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them).
We use exclusively third party cookies, which are served by service providers on the Platform, and can be used by such service providers to recognize your computer or mobile device when it visits other websites.
The Platform uses the following types of Cookies for the purposes set out below.
- a. Essential Cookies. These Cookies are essential to provide you with services available through our Services and to enable you to use some of its features. For example, they allow you to log in to secure areas of our Services and help the content of the pages you request load quickly. Without these Cookies, the services that you have asked for cannot be provided, and we only use these Cookies to provide you with those services.
- b. Functionality Cookies. These Cookies allow our Services to remember choices you make when you use our Services, such as remembering your language preferences, remembering your login details and remembering the changes you make to other parts of Services which you can customise. The purpose of these Cookies is to provide you with a more personal experience and to avoid you having to re-enter your preferences every time you visit our Services.
- c. Analytics and Performance Cookies. These Cookies are used to collect information about traffic to Services and how users use our Services. It includes the number of visitors to our Services, the websites that referred them to our Services, the pages they visited on our Services, what time of day they visited our Services, whether they have visited our Services before, and other similar information. We use this information to help operate our Services more efficiently, to gather demographic information and to monitor the level of activity on our Services.
Disabling Cookies. You can typically remove or reject Cookies via your browser settings. In order to do this, follow the instructions provided by your browser (usually located within the “settings,” “help” “tools” or “edit” facility). Many browsers are set to accept Cookies until you change your settings. Further information about Cookies, including how to see what Cookies have been set on your computer or mobile device and how to manage and delete them, visit www.allaboutcookies.org and www.youronlinechoices.com.uk.
How We Use Your Information
We may use your personal information to contact you with newsletters, marketing or promotional materials and other information.
We also use your personal information to deliver the Platform; respond to requests that you make; and as we believe necessary or appropriate (a) to comply with applicable laws; (b) to comply with lawful requests and legal process, including to respond to requests from public and government authorities; (c) to enforce our Policy; and (d) to protect our rights, privacy, safety or property, and/or that of you or others; and as described in the Section entitled “HOW WE MAY SHARE YOUR INFORMATION” below.
How We Share Your Information
With Third Parties designated by you. We may share your personal data with third parties where you have provided your consent to do so.
With Third Parties. We may share your personal data with third party service providers (“Subprocessors”) to provide you with the Platform, to conduct quality assurance testing, to facilitate creation of accounts, to provide technical support, to conduct data analysis, to process payments, to provide information technology and related infrastructure provision, customer service, email delivery, and/or to provide other services. These Subprocessors are only permitted to use your personal data to the extent necessary to enable them to provide their services to us. They are required to follow our express instructions and to comply with appropriate security measures to protect your personal data. A full list of our subprocessors is available on our website.
As Required by Law. We may access, preserve, and disclose your personal data, other account information, and content if we believe doing so is required by law or if those actions are reasonably necessary to:
- comply with legal process, such as a court order or subpoena;
- enforce this Policy or our Terms of Service;
- respond to claims that any content violates the rights of third parties;
- respond to law enforcement;
- investigate and prevent unauthorised transactions or other illegal activities; or
- protect our or others’ rights, property, or personal safety.
Security of Your Information
We seek to use reasonable organisational, technical and administrative measures to protect personal data within our organisation, which are further detailed in our Data Management Policy. Unfortunately, no transmission or storage system can be guaranteed to be completely secure, and transmission of information via the internet is not completely secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us using the details in the Section entitled “CONTACT.”
Retention
We will only retain your personal data as long as reasonably required for you to use the Platform unless a longer retention period is required or permitted by law (for example, for regulatory purposes).
International Data Transfer
Your information, including personal data that we collect from you, may be transferred to, stored at and processed by us and other third parties outside the country in which you reside, including, but not limited to the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world. By using the Platform, you agree to this transfer, storing or processing.
Your Rights
The following rights may be available to you:
- Opt-out. You may contact us anytime to request to opt-out of: (i) direct marketing communications; (ii) automated decision-making and/or profiling; (iii) our collection of Sensitive Personal Data; (iv) any new processing of your personal data that we may carry out beyond the original purpose, where we have requested your consent prior to such processing; or (v) the transfer of your personal data outside the EEA, where we rely on your consent for such transfer. Please note that your use of some of the Platform may be ineffective or unavailable upon opt-out.
- Access. You may request to access the information we hold about you at any time via your account page or by contacting us directly.
- Amend. You can also contact us to request to update or correct any inaccuracies in your personal data.
- Move. You may contact us to request that we move your data to other service providers as you wish.
- Erase and forget. In certain situations, for example when the information we hold about you is no longer relevant or is incorrect, you can request that we erase your data.
If you wish to exercise any of these rights, please contact us using the details in Section entitled “Contact” below. In your request, please make clear: (i) what personal data is concerned; and (ii) which of the above rights you would like to request to enforce. We may deny your request where permitted by applicable law. For your protection, we may only implement requests with respect to the personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and in any event, within one month of your request. Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting such change or deletion.
Complaints
We are committed to resolve any complaints about our collection or use of your personal data. If you would like to make a complaint regarding this Policy or our practices in relation to your personal data, please contact us using the information in the section entitled “Contact”. We will reply to your complaint as soon as we can and in any event, within 45 days. We hope to resolve any complaint brought to our attention, however if you feel that your complaint has not been adequately resolved, you reserve the right to contact your local data protection supervisory authority.
Changes To This Privacy Policy
We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us when signing up for the Platform, or by placing a prominent notice on our website.
Data Management
ReaDI-Watch Ltd. operates www.readi-watch.com (the "site") and app.readi-watch.com (the “platform”). This page informs you of our policies regarding the collection, use and disclosure of data we obtain through operating the Site and Platform.
For our policy specifically related to Personal Information (which is subject to particular regulatory requirements), see our Privacy and Cookie policy. This Data Management policy relates to all types of data collected through usage of the Site and Platform. As the primary users of ReaDI-Watch’s Site and Platform are businesses, this policy refers to a Company or a User as a “Client”.
Types of Data Collected
In addition to the Personal Information described in the Privacy Policy, the Site and Platform collect “Company Data” to provide you with RD&I automation and management services on our site and platform. This can specifically include:
- R&D and Innovation project data
- R&D and Innovation staff time-logs, activities, email addresses & work experience data
- Company R&D and Innovation strategy data
Who Owns This Data
User Accounts
Logical segmentation is used to ensure customers can only access their own data or data they are specifically authorised to access. A “standard” user account is assigned to one and only one Client account, and is granted access to that Client’s data. A “partner” user account has access to data for their assigned Client, as well as any Clients they are identified as being the “parent” of. ReaDI-Watch staff have access to all Clients and their data.
Data Classification & Obfuscation
By default, ReaDI-Watch classifies all data provided by our customers as secure by default. ReaDI-Watch refers to clients using code names to add obfuscation.
Vendor & Staff Management
All ReaDI-Watch staff (employees and service providers) have signed confidentiality agreements with ReaDI-Watch Ltd. Where necessary, signed Non-Disclosure Agreements are in place.
All data subprocessors (see the list on the ReaDi-Watch website) have agreements in place that are commercially standard, and offer at least as strong or better data protection than ReaDI-Watch’s own policy.
Software Development Lifecycle
In the software development lifecycle, ReaDI-Watch has implemented a peer review process for all changes prior to release. A checklist is completed prior to every release to catch vulnerabilities in real time.
Strong Authentication
ReaDI-Watch has implemented a strong Password policy. The policy includes two-factor authentication linked to the email address of the User account. Credentials should not be shared between users. Internally, ReaDI-Watch employees are mandated to use two-factor authentication when available, and password management tools.
Training
All ReaDI-Watch employees receive training around their job duties and the security obligations inherent in those roles.
Audit Logs
ReaDI-Watch have implemented basic auditing features for usage which retains a log of the User login & latest usage time. Also, we have implemented an activity logging functionality where all project data and activity are recorded for each user; namely creation, update and deletion of project artefacts & documents – this is accessible by each user within each R&D project on ReaDI-Watch©.
Encryption
All data sent across public networks uses standard HTTPS/TLS encryption.
Data Backups & Availability
ReaDI-Watch relies on service providers to provide data backup and availability, and believes their services to be commercially reasonable.
Internal Process Audits
ReaDI-Watch conducts an audit at least annually that includes identifying and prioritising security, privacy, legal, and business continuity risks, as well as a review of our business processes and governance, conducted by company executives representing legal, IT security, IT operations and business continuity planning concerns.
Data Transfer & Deletion upon Termination of Client Agreement
Clients can download their data using self-service features of the platform. When a Client deletes their account, all data is immediately and irrecoverably deleted from the ReaDI-Watch systems, except data which is necessary to support legal or compliance requirements.
Subprocessors
ReaDI-Watch uses certain Subprocessors to assist it in providing the Site and Platform as described in the Terms of Service. ReaDI-Watch may share your Personal Data and Company Data with Subprocessors to provide you with the Site and Platform, to conduct quality assurance testing, to facilitate creation of accounts, to provide technical support, to conduct data analysis, to process payments, to provide information technology and related infrastructure provision, customer service, email delivery, to conduct A/B testing, usage analytics, and reporting, and/or to provide other services. Certain Subprocessors may also process your Personal Data and Company Data using artificial intelligence and machine learning technologies, including for the purposes of generating insights, summarising content, and producing outputs based on data you provide or that is collected through your use of the Platform. Where such AI processing occurs, it is subject to the same restrictions on use and security obligations as all other subprocessing activities described herein. These Subprocessors are only permitted to use your Personal Data and Company Data to the extent necessary to enable them to provide their services to us. They are required to follow our express instructions and to comply with appropriate security measures to protect your Personal Data and Company Data.
- Bubble (software framework & hosting; United States)
- Google suite (email & file storage; United States)
- Anthropic (AI language model services; United States)
- Calendly (meeting scheduling; United States)
- Discord (operational monitoring; United States & Globally)
- HubSpot (customer support; Global)
- MailerSend (transactional email; United States & Globally)
- Matomo (analytics service; EU & New Zealand)
- OpenAI (AI language model services; United States)
- Stripe (payment services; Globally)
- Tactiq (meeting transcription, summarisation & AI note-taking services; United States & Globally)
How We Share Your Information
With Third Parties designated by you. We may share your personal data with third parties where you have provided your consent to do so.
With Third Parties. We may share your personal data with third party service providers (“Subprocessors”) to provide you with the Platform, to conduct quality assurance testing, to facilitate creation of accounts, to provide technical support, to conduct data analysis, to process payments, to provide information technology and related infrastructure provision, customer service, email delivery, and/or to provide other services. These Subprocessors are only permitted to use your personal data to the extent necessary to enable them to provide their services to us. They are required to follow our express instructions and to comply with appropriate security measures to protect your personal data. A full list of our subprocessors is available on our website.
As Required by Law. We may access, preserve, and disclose your personal data, other account information, and content if we believe doing so is required by law or if those actions are reasonably necessary to:
- comply with legal process, such as a court order or subpoena;
- enforce this Policy or our Terms of Service;
- respond to claims that any content violates the rights of third parties;
- respond to law enforcement;
- investigate and prevent unauthorised transactions or other illegal activities; or
- protect our or others’ rights, property, or personal safety.
Security of Your Information
We seek to use reasonable organisational, technical and administrative measures to protect personal data within our organisation, which are further detailed in our Data Management Policy. Unfortunately, no transmission or storage system can be guaranteed to be completely secure, and transmission of information via the internet is not completely secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us using the details in the Section entitled “CONTACT.”
Retention
We will only retain your personal data as long as reasonably required for you to use the Platform unless a longer retention period is required or permitted by law (for example, for regulatory purposes).
International Data Transfer
Your information, including personal data that we collect from you, may be transferred to, stored at and processed by us and other third parties outside the country in which you reside, including, but not limited to the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world. By using the Platform, you agree to this transfer, storing or processing.
Your Rights
The following rights may be available to you:
- Opt-out. You may contact us anytime to request to opt-out of: (i) direct marketing communications; (ii) automated decision-making and/or profiling; (iii) our collection of Sensitive Personal Data; (iv) any new processing of your personal data that we may carry out beyond the original purpose, where we have requested your consent prior to such processing; or (v) the transfer of your personal data outside the EEA, where we rely on your consent for such transfer. Please note that your use of some of the Platform may be ineffective or unavailable upon opt-out.
- Access. You may request to access the information we hold about you at any time via your account page or by contacting us directly.
- Amend. You can also contact us to request to update or correct any inaccuracies in your personal data.
- Move. You may contact us to request that we move your data to other service providers as you wish.
- Erase and forget. In certain situations, for example when the information we hold about you is no longer relevant or is incorrect, you can request that we erase your data.
If you wish to exercise any of these rights, please contact us using the details in Section entitled “Contact” below. In your request, please make clear: (i) what personal data is concerned; and (ii) which of the above rights you would like to request to enforce. We may deny your request where permitted by applicable law. For your protection, we may only implement requests with respect to the personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable and in any event, within one month of your request. Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting such change or deletion.
Complaints
We are committed to resolve any complaints about our collection or use of your personal data. If you would like to make a complaint regarding this Policy or our practices in relation to your personal data, please contact us using the information in the section entitled “Contact”. We will reply to your complaint as soon as we can and in any event, within 45 days. We hope to resolve any complaint brought to our attention, however if you feel that your complaint has not been adequately resolved, you reserve the right to contact your local data protection supervisory authority.
Changes To This Privacy Policy
We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us when signing up for the Platform, or by placing a prominent notice on our website.
Download DPA AgreementOur Approach to AI
Last updated June 2026
AI is central to what we build and how we work. This page explains what we use it for, what principles govern its use, and what that means for your data. This statement is reviewed annually and updated whenever we make material changes to the AI tools we use or the principles that govern them.
Our Position
We have spent years working with companies and applied research centres on R&D across multiple industries and jurisdictions. Along this journey, we see the same two problems appear everywhere, regardless of sector or scale:
- Organisations struggle to define, measure and manage their R&D consistently. There are few common standards, shared frameworks, and common language for what R&D actually is in an industrial and applied context.
- The difficulty in defining, measuring and managing R&D creates a deep struggle to capture new R&D knowledge generated within the organisation. The experimental journey, the decisions taken, the knowledge generated, tends to remain tacitly in people’s memory. It tends to not be recorded in a form that can be reused, built upon, or defended.
ReaDI-Watch addresses both of these problems. It provides the framework that has been missing, a structured way to define, govern, and capture R&D as it happens. AI is transformative in making that practical. It makes rigorous, real-time knowledge capture fast enough and natural enough that it actually gets done. But it does not replace human judgement. The decisions, the validation, the authority over what gets recorded, these remain with the people doing the work. That is how we have designed it, and that is what makes the output trustworthy.
Five Principles for AI
Every AI design and development decision for the ReaDI platform is guided by five principles. They apply equally to how we deliver services to clients today and to how the platform itself is built.
1. Human governance — AI assists, humans decide.
AI sequences tasks, structures outputs, and surfaces knowledge. It does not make decisions on your behalf, resolve uncertainty independently, or overwrite records without instruction. Authority remains with the user at all times. Nothing the AI generates becomes part of your knowledge base until a named person has reviewed and approved it.
2. Temporal integrity — the record cannot be rewritten.
Approved records are immutable. Once content is sealed, its substance, sources, contributor attribution, and approval timestamps are locked and cannot be modified — not by users, not by administrators, not by the AI. Later understanding is captured through new records linked to their predecessors, not by revising earlier ones. This creates a development narrative that is authentic and defensible over time.
3. Progressive validation — only approved knowledge becomes the foundation for future outputs.
The platform builds knowledge progressively. Each approved record draws on validated records before it and becomes the basis for what comes next. Unapproved or weakly supported content is flagged and cannot propagate through the system. Accuracy compounds over time rather than errors compounding.
4. Constrained autonomy — agents support progression but do not independently determine outcomes.
When the AI encounters uncertainty or incomplete information it has three permitted behaviours: proceed where sufficient information exists, flag what is uncertain or weakly supported, and ask targeted questions to resolve material gaps. It does not fill gaps with assumptions or present inferred content as factual. Users can always see what the AI is confident about and what it is not.
5. Transparency — users always understand what the AI is drawing from and how confident it is.
Before any AI-assisted session begins, users see exactly which source material has been selected and can adjust it. During generation, each output carries a confidence indicator showing how closely it is grounded in that source material. Where confidence is low, the flag identifies what is weakly supported and why. Every override decision is recorded permanently.
AI in Our Work
AI is already part of how we deliver services to clients today — in research, analysis, knowledge structuring, and documentation. The same five principles apply to our service delivery as to the platform itself.
When a ReaDI-Watch team member uses AI to support a client engagement, the output is reviewed, validated, and approved by a qualified person before the client sees it. The AI accelerates the work. The human is responsible for it.
We also use AI internally for operational tasks including drafting communications, summarising research, and preparing meeting notes. The same rules apply: review before use, no client data without a documented basis, no unapproved tools. When we use AI transcription on calls, we tell you at the start of the session. You can decline, and we will accommodate that.
The AI Tools We Use
| Provider | What we use it for | Location |
|---|
| Anthropic (Claude) | AI language model powering the ReaDI platform; internal drafting and analysis | United States |
| OpenAI | Supplementary AI language model capability | United States |
| Tactiq | Meeting transcription and summarisation | United States |
All three providers are listed as Subprocessors in our Privacy Policy. Each operates under enterprise agreements that include explicit commitments against using your data to train their models.
Your Data
When you use the ReaDI platform, your data is processed by AI to help generate reports and surface knowledge. That processing happens within the architecture described above: permission-bounded, human-reviewed, and never used to train models.
We apply the following rules without exception:
- Your data is processed only to deliver the service you have asked for.
- It is not shared with other organisations or used to inform outputs for other clients.
- It does not leave the ReaDI infrastructure except through scoped prompts sent to our AI providers, which are subject to their enterprise data protection commitments.
- Sensitive financial data — including salary information, cost structures, and funding projections — is accessible only to users with explicit permission. That boundary applies to the AI as well.
Applicable Laws and Regulations
ReaDI-Watch operates across multiple jurisdictions and designs its AI use to comply with the data protection and AI governance frameworks applicable in those environments.
General Data Protection Regulation (GDPR) — EU/EEA
Where ReaDI-Watch processes personal data on behalf of EU or EEA-based clients or their employees, we act as a data processor under GDPR. Our clients act as data controllers. The lawful basis for processing is the performance of a contract (Article 6(1)(b)) and, where applicable, legitimate interests (Article 6(1)(f)). Data subject rights — including access, rectification, and erasure — are governed by the terms of our Data Processing Agreement and Privacy Policy.
PIPEDA and Law 25 — Canada
For Canadian clients and engagements, ReaDI-Watch operates in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) at the federal level, and Québec’s Law 25 where applicable. Our data handling practices are designed to meet the requirements of both.
EU AI Act
The EU AI Act is now in force with obligations coming into effect on a phased timeline through 2027. ReaDI-Watch is monitoring its applicability to our platform and service delivery. The constrained autonomy model at the core of ReaDI — which requires human review and approval before any AI-generated content enters a client’s knowledge base — is designed to align with the transparency and human oversight principles the Act requires. We will update this section as regulatory guidance matures.
For full details of how personal and company data is collected, stored, protected, and subject to individual rights, see our Privacy Policy and Data Processing Agreement at readi-watch.com/privacy.
Enterprise and Sovereign Deployments
For larger organisations with specific data residency, sovereignty, or regulatory requirements, the ReaDI platform is designed to accommodate deployment models that go beyond our standard configuration. Depending on your organisation’s requirements, we can explore:
- Private cloud deployments where your data is processed on dedicated infrastructure rather than shared endpoints.
- Self-hosted open source models deployed entirely within your own infrastructure, where no data crosses your organisational boundary at any point.
- Hybrid arrangements where the knowledge base and retrieval layer sit inside your environment and AI processing is handled through a private, contracted endpoint.
If this applies to your organisation, get in touch to discuss what is possible.