Trust Center
Security, privacy, data boundaries, and responsible AI governance practices for Alpha's research, ratings, assessments, memberships, and public web surfaces.
Program overview
Trust is part of the operating model.
Alpha works with directors, management teams, investors, insurers, and public institutions. Our trust posture is designed for confidential evaluation work, independent ratings, and agent-native public discovery.
Last updated July 20, 2026
Security program
Least-privilege access, protected production secrets, dependency review, secure headers, and deployment checks for public web and agent-discovery surfaces.
Data boundaries
Client-confidential material is separated from public-source research workflows and handled according to engagement terms, purpose, and access need.
Privacy
Alpha publishes privacy, cookie, and terms notices for its website, research, ratings, memberships, assessments, and convenings.
Operational transparency
Public liveness, readiness, agent-readiness, API catalog, and well-known metadata endpoints make the site inspectable by people and machines.
Controls
Control areas we maintain and review.
The trust center is organized around the control categories customers and partners normally need for vendor review, data protection, and AI governance assurance.
Access control
Role-based access, credential hygiene, least-privilege permissions, and restricted handling of production secrets.
Application security
Secure routing, no client-side service-role secrets, security headers, linting, automated tests, and review before public deployment.
Data handling
Purpose limitation, confidentiality boundaries, vendor review, and retention aligned to the service or engagement.
AI governance
Human accountability for research and ratings, methodology discipline, source tracking, and separation between public evidence and confidential client inputs.
Vendor management
Material subprocessors and infrastructure providers are reviewed for role, data access, security posture, and contractual obligations.
Incident response
Triage, containment, stakeholder notification, corrective action, and post-incident review procedures for suspected security or privacy events.
Documentation
Public and requestable trust materials.
Public documents are linked directly. Engagement-specific materials are shared with qualified customers, partners, and reviewers under the right confidentiality terms.
Privacy Notice
PublicHow Alpha collects, uses, shares, and safeguards personal information.
OpenTerms of Use
PublicTerms governing access to Alpha's website, research, ratings, and services.
OpenCookie Notice
PublicCookie categories, purposes, and privacy contact path.
OpenOperational Status
PublicHuman-readable public site status and machine endpoint references.
OpenAgent readiness metadata
PublicMachine-readable readiness, discovery, and API catalog surfaces.
OpenSecurity questionnaire
Available on requestCustomer security and vendor-risk questionnaire responses for qualified reviews.
Data processing terms
Client-specificEngagement-specific data processing, confidentiality, and subprocessor terms.
Subprocessor overview
Available on requestSummary of material infrastructure and service providers used to deliver Alpha services.
AI governance boundaries
Independent opinions require clean boundaries.
Alpha's work depends on independence, evidence discipline, and careful treatment of confidential materials. These boundaries are core to how we protect clients and preserve rating integrity.
Alpha does not sell AI software and does not advise on the systems it rates.
Confidential client inputs are not used to train public models without written authorization.
Ratings, benchmarks, and research remain human-accountable opinions as of their stated date.
Public-source research and confidential engagement materials are handled in separate workflows.
Updates and reporting
How to request, review, or report.
Use these channels for security reviews, privacy questions, vulnerability reports, and material trust-center updates.
Request materials
Ask for security questionnaires, subprocessor details, data processing materials, or engagement-specific documentation.
Contact AlphaPrivacy and security
Send privacy or security questions, including suspected vulnerabilities, to the privacy team for triage.
privacy@alpha.acTrust updates
Material updates to privacy notices, subprocessors, operational posture, or trust-center materials are reflected on public pages or client notices.
View newsPublic endpoints