Guarantees, with their proofs
A guarantee you cannot verify is a promise. This page states what the platform enforces, and next to each statement, how to check it yourself. Nothing here is aspirational: every sentence describes something already built, measured or published.
🇪🇺 Your data lives in the European Union
The data plane — the databases holding survey answers — is hosted in the EU (Frankfurt region), per campaign and by default. Raw answer data does not leave the Union.
How to verify. The privacy policy names the hosting and region; it is binding on us.
🔒 Anonymous means anonymous — enforced, then k-anonymised
In the anonymous regime nothing stored can identify a respondent: no account, no e-mail, no IP kept. At campaign close, any combination of characteristics shared by fewer than five respondents is suppressed (k-anonymity, k = 5) before any dataset leaves the platform.
How to verify. The privacy policy documents the regime and the rule of five. Participating costs nothing to check: the anonymous journey never asks who you are.
🚫 No cookies, no trackers — verifiable in one gesture
Neither this site nor the app sets cookies, loads trackers or runs analytics. Only your device’s local storage is used, for strictly functional needs (language choice, an unfinished questionnaire).
How to verify. Open your browser’s developer tools on any page: the cookie jar stays empty, and no third-party analytics request appears.
🪪 AI-generated media declare themselves — inside the file
Every AI-generated medium the platform serves (portraits, voices, clips) carries a visible AI mark and an embedded, cryptographically signed provenance manifest (C2PA Content Credentials) declaring it as trained-algorithmic media — the machine-readable disclosure the EU AI Act (art. 50) calls for. The disclosure travels inside the file, wherever it is copied. Our generator (sumvadis-fabrique) is conformant: assessed by the C2PA Conformance Program (Notice of Conformant Status, September 4, 2026) and listed on the public Conforming Products List. Until its certificate chains to the public C2PA trust list, verifiers still label the signer as provisional — the provenance and the AI disclosure are readable today.
How to verify. Download any figure portrait from the app and drop it into a Content Credentials inspector (e.g. Adobe’s verify tool): the manifest, the AI declaration and the signature appear. And the conformance itself is public: our entry — sumvadis-fabrique (RIGHT-ON-SKILL) — is on the C2PA Conforming Products List.
🔐 A public door for security reports
A standing security contact, published in the standard machine-readable location (RFC 9116), with acknowledgement within 72 hours.
How to verify. Open /.well-known/security.txt — it is live, on this very domain.
♿ Accessibility, audited on every change
The participant journey is audited against WCAG 2 level AA with an automated engine (axe-core) as a blocking gate of our delivery pipeline: a change that introduces a violation cannot ship.
How to verify. Keyboard-only navigation, screen-reader labels and visible focus are testable directly in the app — try the whole journey without a mouse.
🗑 The right of erasure has a real gesture
In identified campaigns, a single response can be permanently deleted by the operator — the export, the counters, the aggregates and the participant’s consultation code all reflect the deletion immediately. In the anonymous regime the question does not arise: nothing stored can point back to you.
How to verify. Exercise it: write to contact@sumvadis.ai — the privacy policy states the commitment.
📈 Proven under load, in production conditions
The platform is exercised with full synthetic participations against real campaigns before large events — bursts of thousands of submissions, with regime-safety re-audited under load (still no identifier stored, even at peak).
How to verify. The measured figures on the front page come from these campaigns and are updated when re-measured — never invented.