Privacy Notice

Regwise is a regulatory intelligence tool built and run by Evolutiva Labs Ltd (“we”, “us”, “our”), a company registered in England and Wales.

If you have any questions about how we handle your personal data, contact us at hello@evolutivalabs.com.

This notice covers the Regwise application. Our marketing website is covered by a separate notice at evolutivalabs.com/privacy.html.

When you request access, we collect:

• —Your full name
• —Your work email address
• —Your company name
• —Your job title
• —Optionally: the regulatory bodies most relevant to you, and a short description of why you are requesting access

If your request is approved, we also collect:

• —Sign-in records, including the time you signed in and how long your session lasted
• —Your source preferences and any views you save
• —Your decisions on regulatory updates — whether you approved, rejected or escalated them

If you send us feedback from inside Regwise, we collect whatever you write, along with your name, email address and role. Please see section 5 before you use it.

Some things are worth stating plainly, because people reasonably assume otherwise about an AI product.

Your data never reaches our AI provider. Regwise uses an external AI model to summarise regulatory publications. It only ever sees material that regulators have already published. Nothing you enter, and nothing about you or your firm, is sent to it.

There is no chat or free-text query interface. Search and filtering happen entirely inside our own database.

We do not send marketing emails. We have no email system and no mailing list.

We do not use tracking or advertising cookies, and there is no analytics tool in the product.

To assess your access request. We review what you tell us to decide whether Regwise suits your needs and to manage access during the alpha. Legal basis: legitimate interests — running an invite-only product.

To give you access. If approved, we use your email address to send you your credentials. Legal basis: performance of a contract, or steps taken at your request before one.

To contact you about your account. We may email you about your application, your account, or changes that affect how you use the platform. Legal basis: legitimate interests.

To operate and improve the service. Sign-in records, preferences and review decisions let us run the platform and understand how it is used during the alpha. Legal basis: legitimate interests.

To act on your feedback. Legal basis: legitimate interests — improving a product you are testing.

We do not sell your personal data, and we do not share it with anyone for marketing.

Amazon Web Services hosts the platform. Your data is stored in AWS’s Ireland region (eu-west-1).

Atlassian. If you send feedback from inside Regwise, it becomes a ticket in Jira, our project management system. Atlassian may store that data in data centres anywhere in the world.

Please do not put anything confidential about your organisation into the feedback box. If you need to tell us something sensitive, email hello@evolutivalabs.com instead.

Regwise is in alpha. We may reset data between releases.

• —Your account data is kept while your account is active.
• —Access requests we did not approve are deleted within six months of the request.
• —Sign-in and security records are kept for 90 days.

If you ask us to delete your data, we will do so within 30 days. At our current size this is done by hand rather than by an automated process, which does not change the outcome or the deadline.

Under UK and EU data protection law you have the right to:

• —Access — ask for a copy of the personal data we hold about you
• —Correction — ask us to correct anything inaccurate or incomplete
• —Deletion — ask us to delete your personal data
• —Restriction — ask us to stop processing it in certain circumstances
• —Objection — object to processing based on legitimate interests
• —Portability — ask for your data in a machine-readable format

To use any of these, email hello@evolutivalabs.com. We will respond within one month.

Because Regwise is a small alpha, we handle these requests manually. Portability means we will put your data together and send it to you; there is no self-service export button.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk, or to your local data protection authority if you are in the EU.

Regwise stores two things on your device. Neither is used for tracking or advertising.

regwise-session — a cookie that keeps you signed in. It holds an encrypted record of your account, and it is deleted when you close your browser. It is marked HttpOnly, SameSite=Lax and Secure, so it cannot be read by scripts and is only sent over HTTPS.

Separately, your session ends after 10 minutes without activity, and you will need to sign in again.

regwise-view-mode — a small setting in your browser’s local storage that remembers whether you prefer the compact or detailed view of the feed. It contains no personal data and is never sent to us.

Both are necessary for the platform to work properly, so we do not ask for consent to use them.

We may update this notice from time to time. When we do, we will change the “Last updated” date at the top of this page. If a change is significant, we will say so here and in the application.