Privacy, consent and organizational data boundaries.

Xkila collects profile, contact, assessment response and usage data needed to deliver diagnostics, reports, learning outputs and platform operations.

Public proof-of-concept assessments require name, email and consent so a report can be associated with the participant and follow-up can be managed responsibly.

Tenant workspaces are designed around organization-scoped access. Enterprise customers remain responsible for assigning authorized users and ensuring participant notices are appropriate for their context.

Security controls include role-based access, tenant-scoped queries, protected report/export routes and audit-oriented event logging. Additional data processing terms are handled through enterprise agreements.