EverRhythm
Personal sign inProfessional sign in

Trust & governance

EverRhythm Policy Centre

Your data. Your rights. Our responsibilities.

A public page is accessible, not necessarily legally approved or independently assured. Consult the governed policy estate below for each document's recorded review state; outstanding review and missing approval metadata remain explicit.

Who can see my information?

A relationship in Work, Education, Professional, Research or another EverRhythm environment does not by itself grant access to your Personal or Student information.

See the trust boundaries

Where does my information go?

Recipients and providers depend on the feature, purpose and deployed data flow. A configured integration is not treated as proof that it receives data on every journey.

Read data-sharing information

Exercise my rights

Find information about access, correction, deletion, portability, restriction and objection. Some rights depend on the processing and applicable law.

Read about your rights

Who can see what?

Relationships do not automatically become permission

EverRhythm separates Personal, Student, Education, Professional, Research and support contexts. Where sharing is implemented, the route must have its own authority and scope.

Personal and Student

Student is your individual-owned study space. It does not automatically open your Personal record.

What can be shared
Only information you deliberately prepare for an implemented, purpose-bound sharing route can move between environments.
What the relationship cannot unlock
Student status does not grant general access to Personal data or your Personal longitudinal timeline.

No automatic inheritance between Personal and Student.

Student and Education

Student belongs to the individual. Education belongs to the institution.

What can be shared
A selected Student evidence package can be disclosed through the implemented scoped-grant route when consent, recipient authority, provenance and institution scope checks pass.
What the relationship cannot unlock
A university or education relationship does not create browsing access to your Student record or Personal record.

Share the package, not the private workspace.

Professionals

Finding, contacting or having a relationship with a professional does not open your private record.

What can be shared
Professionals can receive information through deliberately scoped disclosure-package routes where the required user permission applies.
What the relationship cannot unlock
Professional status does not grant general Personal, Student or longitudinal browsing access.

A relationship is not permission.

Support Network and caregivers

Being named as a supporter or caregiver is not blanket access to somebody else’s information.

What can be shared
The implemented Personal support route requires an active delegation and remains category-specific and time-bounded.
What the relationship cannot unlock
Support relationships do not create Student-record or Personal-longitudinal browsing authority, and revoked access stays denied.

Delegation is specific, limited and revocable.

Research

Joining a study does not give researchers general access to your EverRhythm record.

What can be shared
Implemented Research access is limited to study-specific, consented pseudonymized data or consented Evidence routes.
What the relationship cannot unlock
Research cannot use the relationship to browse identifiable Personal data, generic Personal data, Student records or your Personal longitudinal timeline.

Study-specific consent defines the route; withdrawal or expiry closes future access.

DSA assessor enquiries

An assessor enquiry is a professional contact workflow, not a key to a Student or Personal record.

What can be shared
The enquiry can contain the minimum information needed to handle the contact, with a Student reference only where necessary and appropriately authorised.
What the relationship cannot unlock
Submitting or handling an enquiry never creates Student or Personal record access authority.

Contact authority is not record-access authority.

A recipient’s role, employment, institution, professional relationship, research relationship or support relationship does not silently expand what that recipient may see.

Organisations & Professionals

Governance information for Work, Education and Professional relationships without turning those relationships into Personal or Student access.

AI, Trust & Security

How EverRhythm distinguishes product capability, internal evidence, independent assessment and external assurance.

Providers & Governance

Supplier, research and governance information stays tied to evidenced data flows, study-specific permissions and current review state.

  • ResearchStudy-specific governance applies

Governed policy estate

Current publication and review state

Formal approval metadata is shown only when it genuinely exists. Unknown owners, effective dates and outstanding competent review stay explicit rather than being filled with placeholder dates or implied approval.

ER-LEG-001

Privacy Notice

Data rights · Retention · Connected services · Provider information · International transfers

State
PUBLISHED REVIEW REQUIRED
Version
Working static revision
Owner
UNKNOWN
Effective
Not yet approved

Competent privacy/legal review, verified organisational facts and genuine approval metadata remain open.

ER-LEG-002

Terms of Service

Core service terms · Account responsibilities

State
PUBLISHED REVIEW REQUIRED
Version
Working static revision
Owner
UNKNOWN
Effective
Not yet approved

External legal review and genuine approval/effective metadata remain open.

ER-LEG-004

Safeguarding Policy

Safeguarding

State
PUBLISHED REVIEW REQUIRED
Version
Working static revision
Owner
UNKNOWN
Effective
Not yet approved

Safeguarding/legal review and age-governance decisions remain open.

ER-WRK-001

Work Privacy Policy

Education/Work boundaries · Employee privacy · International transfers

State
PUBLISHED REVIEW REQUIRED
Version
Working static revision
Owner
UNKNOWN
Effective
Not yet approved

Deployment-specific roles, retention, suppliers and employment/privacy review remain open.

ER-WRK-002

Work Terms of Service

Work contractual boundaries

State
PUBLISHED REVIEW REQUIRED
Version
Working static revision
Owner
UNKNOWN
Effective
Not yet approved

Contractual review and customer-specific SLA/liability terms remain separate.

ER-STU-001

Student privacy & data boundaries

Student privacy · Student↔Education sharing · DSA assessor boundary

State
CONTEXTUAL
Version
Phase 107 public boundary projection
Owner
Governance + Privacy
Effective
Not yet approved

The census has not authorised a standalone Student legal notice or Terms; current public material is a factual boundary explanation only.

ER-DSA-INFO

DSA & Funding information

DSA/Funding information

State
PUBLIC INFORMATION
Version
Current public discovery
Owner
Product + Governance
Effective
Not yet approved

Discovery information is not DSA approval, funding, assessor recommendation or SFE endorsement.

ER-DSA-ENQ

DSA Assessor Enquiry privacy boundary

DSA Assessor Enquiry privacy

State
CONTEXTUAL
Version
Governed enquiry workflow
Owner
Product + Governance
Effective
Not yet approved

Enquiry authority never creates Student or Personal record-access authority.

ER-PRO-001

Professional / Find a Professional transparency

Professional transparency

State
PUBLIC INFORMATION
Version
Current public information
Owner
Product + Governance
Effective
Not yet approved

Public product/trust information is not a substitute for any formal terms or notice later determined necessary.

ER-RES-001

Research participant information

Research governance

State
STUDY SPECIFIC
Version
Per study
Owner
Study owner + Research governance
Effective
Not yet approved

Participant information, ethics, consent, withdrawal, permitted data and retention must be established for the specific study.

ER-AI-001

AI & Intelligence governance

AI & human decision-making · Intelligence governance principles

State
CONTEXTUAL
Version
Phase 109 public governance bridge
Owner
Governance + Assurance
Effective
Not yet approved

Public governance explains specialist roles and authority boundaries; no certification, clinical authority or unrestricted data-access claim is implied.

Supersession history begins only when an approved version is genuinely replaced. A working revision is not retroactively given an effective date simply to populate this register.