Welcome to Tech Harms Check. By visiting or using this website or tool, you signify your agreement to these terms of use, which include our conditions of use and privacy policy. Global Partners Digital may modify these terms of use at any time and you agree to be bound by any such modifications. If you do not agree to these terms, please do not continue to visit or use the website or tool.

Tech Harms Check is developed and operated by Global Partners Digital (company number 5201603), also referred to as 'we' or 'us', whose registered office is 167-169 Great Portland Street, London, W1W 5PF, United Kingdom. 'You' refers to the visitor or user of this website or tool.

Copyright
This website and tool contain material which is owned by or licensed to us, including the design, layout, look, appearance, graphics, and the underlying knowledge base framework. Materials owned by us will specify the terms of licence under which they are available. Reproduction is prohibited other than in accordance with the copyright notice or terms of licence, which forms part of these terms and conditions.

All trademarks reproduced in this website which are not the property of, or licensed to, the operator are acknowledged on the website.

Using www.techharmscheck.org

Unauthorised use of this website or tool may give rise to a claim for damages and/or be a criminal offence.

The content of this website is for your general information and use only. It is subject to change without notice.

Access to the Tech Harms Check tool is by invitation only during the prototype phase. Access tokens are issued by Global Partners Digital for the purposes of testing and evaluation. Tokens must not be shared with third parties. Global Partners Digital reserves the right to revoke access at any time.

Disclaimer – accuracy and limitations of AI-generated content
Tech Harms Check is an AI-assisted screening tool designed to help identify potential human rights impacts and risks associated with technology projects and interventions. It is intended as a first step in a due diligence process only.

Tech Harms Check is not:

• a full human rights impact assessment or fundamental rights impact assessment;
• a legal assessment or seal of approval of any kind;
• a substitute for expert judgement.

Reports generated by Tech Harms Check do not account for any mitigation measures already in place within your programme or organisation. Reports identify potential human rights impacts based on the information you provide and the tool's knowledge base; they do not reflect actions already taken to address those impacts.

Reports are produced using artificial intelligence. AI-generated content is clearly labelled within reports. While Tech Harms Check is designed to make AI-generated human rights due diligence more accurate and reliable by grounding outputs in an expert-built knowledge base, AI systems can and do produce inaccurate, incomplete, or contextually inappropriate outputs. You should always verify, interrogate, and apply your own expert judgement to any content generated by the tool, particularly where it informs decisions affecting individuals or communities.

Global Partners Digital and its partners make no warranty or guarantee as to the accuracy, completeness, timeliness, or suitability of tool outputs for any particular purpose. We expressly exclude liability for any inaccuracies or errors in AI-generated content to the fullest extent permitted by law.

Your use of any reports, recommendations, or other outputs generated by this tool is entirely at your own risk.

Project data and inputs
When using the Tech Harms Check tool, you may submit descriptions or documentation relating to your projects or programmes. You are responsible for ensuring that any information you submit does not contain personal data belonging to third parties without appropriate authorisation, and that you have the right to process and share any information you input into the tool.

Tech Harms Check is designed to be compatible with a range of large language model (LLM) and AI systems. Project descriptions and inputs you provide are processed by whichever LLM you use to operate the tool. You should consult the privacy policy and terms of service of your chosen LLM provider in relation to how your inputs are handled by that provider. Global Partners Digital is not responsible for the processing of your data by third-party LLM providers.

See more about how we handle your project data and inputs below.

Knowledge base
The knowledge base underlying Tech Harms Check has been developed by Global Partners Digital and the Danish Institute for Human Rights, with input from practitioners and partners in the digital rights field. It is subject to ongoing review and development. Global Partners Digital retains ownership of the knowledge base framework. The knowledge base is made available for transparency and reference purposes. It does not constitute legal advice and should not be relied upon as such.

Third party websites
This website may include links to other websites. These links are provided for your convenience only and do not signify that we endorse those websites. We have no responsibility for the content of linked websites.

Jurisdiction
Your use of this website and tool, and any dispute arising out of such use, is subject to the law of England and Wales.

Privacy Policy
Global Partners Digital is strongly committed to protecting your privacy and aims to collect as little personal data as possible. All personal data collected from you is stored and processed in accordance with the UK Data Protection Act and the General Data Protection Regulation.

This policy applies to all online systems offered by Global Partners Digital through www.techharmscheck.org and any other websites we operate in connection with this tool.

Global Partners Digital is the registered data controller to which this policy refers. This policy is reviewed and, where relevant, updated every 12 months. As required by data protection law, we only collect and process personal data where we have a legal justification.

Project, input and output data
The Tech Harms Check involves privacy by design. Project, input and output data is anonymised and encrypted. More information on its privacy by design elements will be shared upon launch.

Why we collect your personal data
Global Partners Digital only collects personal data via this website from you:

• to track website usage patterns;
• to manage tool access requests;
• to respond to contact form enquiries;
• to send you updates about the tool, its development and launch;
• to fulfil any legal obligations.

Types of personal data collected
To track usage patterns, we use Umami, a privacy-focused analytics platform. Umami does not use cookies, does not collect personal data, and does not track users across websites. All analytics data is anonymised and aggregated.

When you request access to the tool via the signup form, we collect:

• First name and last name
• Email address
• Organisation
• Free-text message (optional)
• Sign up consent

When you submit the contact form, we collect:

• First name and last name
• Email address
• Organisation
• Message content (optional)
• Sign up consent

Both forms use Altcha, a privacy-focused captcha system, to verify that submissions are made by humans. Altcha processes a cryptographic challenge locally in your browser and does not collect or store personal data.

Third-party data processors
Personal data submitted through the signup and contact forms is transmitted to and stored by Brevo (Sendinvest SA), a third-party email and contact management platform, for the purposes of managing communications and access requests. Brevo processes this data on our behalf as a data processor under a data processing agreement. You can review Brevo's privacy policy at https://www.brevo.com/legal/privacypolicy/.

Access token data (token identifiers and hashed token values) is stored in our Directus content management system. Access tokens are stored as cryptographic hashes (SHA-256) and cannot be reversed to recover the original token value.

No personal data is shared with any other third parties except as described in these terms or as required by law.

Data retention
Your personal data is held only for as long as is necessary for the purpose for which it was collected. Data relating to prototype access and communications will be retained for the duration of the prototype testing period and for a reasonable period thereafter for evaluation and development purposes. After this time the data will be deleted or retained in anonymised form for research and analytical purposes only.

Use of cookies
This website does not use cookies for analytics or tracking purposes. Umami, our analytics platform, is designed to operate without cookies. Essential cookies may be used for basic website functionality only.

Your rights and access to your personal information
The personal data we hold about you is yours. You have the following rights over your personal information:

• to be informed how your data is being processed;
• to access your data;
• to rectify any data that is inaccurate;
• to instruct us to delete your data;
• to restrict how we process your data at any time;
• to object to your data being stored;
• to move your data.

Contact and complaints
If you wish to exercise any of these rights, or have any questions about these terms or this policy, you may contact us at info@gp-digital.org or by post at the address listed above.
We aim to respond within four weeks.

If you wish to lodge a complaint about our handling of your personal data, please contact us at the details above.

The Information Commissioner's Office is the UK regulator for data protection and privacy enforcement: https://ico.org.uk