Privacy & Data Sovereignty Policy
Last Updated: March 3, 2026
At AECO.digital, we provide forensic technical intelligence for the built environment. Because we evaluate the industry for data sovereignty and systems integrity, we adhere to the highest global standards of data stewardship. This policy defines our methodology for the collection, protection, and strategic use of professional data.
1. Data Acquisition Taxonomy
We exclusively collect data that enhances the technical depth of AECO research.
- Professional Identity: Email and organizational role for Briefing subscribers and Registry members.
- Systems Assessment Data: Responses provided during Digital Maturity Assessments. This data is anonymized and aggregated for industry benchmarking. Individual firm telemetry is never disclosed without a specific bilateral agreement.
- Forensic Metadata: IP addresses and functional cookies used strictly for platform security, infrastructure analytics, and the prevention of unauthorized scraping of our proprietary research.
2. Strategic Data Utilization
- Intelligence Distribution: Delivery of the Weekly Briefing and Technical Frameworks.
- Longitudinal Research: Aggregating anonymized data to produce industry-wide reports on AECO technology adoption and “System of Systems” (SoS) maturity.
- Regulatory Compliance: Ensuring platform alignment with international trade and data sovereignty laws, including GDPR (EU), CCPA/CPRA (California), and emerging AI transparency mandates.
3. Data Sovereignty & Jurisdictional Control
In alignment with our Global Gatekeeper research pillar:
- GDPR & International Frameworks: We maintain strict compliance for our European and international users, ensuring all processing meets the “highest common denominator” of global privacy law.
- Residency & Infrastructure: We prioritize data residency and minimize cross-border transfers. Our infrastructure partners are required to maintain SOC2, ISO 27001, and ISO 42001 (AI Governance) certifications.
4. Independence & Neutrality Mandate
Independence is the foundation of our technical authority.
- Zero-Tracking Policy: We do not permit “tracking pixels” or behavioral advertising scripts from AECO vendors or startups on this platform.
- Non-Commercialization: We do not sell professional contact information to the vendors we evaluate. Our Vetting Lab findings remain isolated from commercial influence.
5. Rights & Technical Sovereignty
In 2026, we recognize your right to control your digital footprint:
- Portability: Request a structured export of your professional data.
- Erasure (Right to be Forgotten): Request the permanent deletion of your account and assessment history.
- ADMT Opt-Out: You have the right to opt-out of any automated processing used for professional profiling or decision-making.
6. Export Control & Security Disclosure
As we monitor dual-use technologies (including ITAR/EAR related data in our Engine Room), we comply with federal legal compulsions under international trade laws or for national security purposes.
Questions About This Policy?
If you have questions about how we handle your data, or to exercise your rights, please contact us: