TRUST CENTER
Your information deserves thoughtful handling.
Building in GRC helps people explore career paths and build practical skills. This page explains how our currently available assessment and Early Access experience handle information, and distinguishes those services from features still in development.
Last updated October 14, 2026
What is available today
You can complete the free career assessment and view your results without creating an account. You can save results as a PDF, request a copy by email, or separately join the Early Access list. The broader signed-in learning workspace is not part of this public release.
Information and choices
- Assessment: You provide answers about your career interests, experience, and goals to receive a personalized result. Completing the assessment does not require an email address.
- Results email: If you request emailed results, we use the address you enter to deliver that message. Requesting results does not by itself opt you into marketing.
- Marketing: Optional marketing consent is separate and is not preselected. We use the email you provide for updates only when you choose to subscribe.
- Early Access: If you join the list, we record your email, enrollment and consent details so we can manage launch communications. Volunteering for beta testing is a separate choice and does not guarantee an invitation.
Service providers currently in use
We use service providers to operate the public experience. Their involvement does not mean Building in GRC holds their certifications.
Vercel
Hosts the Building in GRC web application.
Supabase
Stores Early Access enrollment records and supports application data services.
Systeme.io
Manages Early Access communications and opted-in marketing subscriptions.
Resend
Delivers assessment results by email when you request them.
Privacy and security approach
We aim to minimize data collection, separate optional consent choices, and restrict access to private application areas. Public portfolios in the developing workspace are designed to be opt-in. These are product practices and design goals, not a claim of independent security certification. We do not claim that Building in GRC is SOC 2 or ISO 27001 certified, or HIPAA certified.
Features still in development, including private portfolios, uploaded evidence, and advanced AI-assisted workflows, may have additional data handling practices before they become publicly available. We will update this page as those features launch.
Questions, privacy requests, and security reports
For questions about personal information, email preferences, or a suspected security issue, contact privacy-security@buildingingrc.com. Please do not include passwords, access tokens, or sensitive personal information in your first message. We will review requests and respond as appropriate.