Confidentiality Agreement (NDA)

What counts as confidential information

The following is treated as confidential information, whatever medium it is shared in:

• Corporate information shared in the application form and during the organizational discovery stage.
• The responses, raw data and scores gathered in the HCT, DOMINE™ and V10 assessments.
• The Invisible Friction Report and the restoration roadmap produced by the audit.
• Any information about the Organization's internal processes, organizational structure or commercial activity learned during the process.

The obligations of CHCO.tc™

CHCO.tc™ uses the confidential information it accesses during the process for assessment and certification purposes only.

• Organizations that fall below the threshold score in an audit are not disclosed publicly; the result is shared with the organization alone.
• Access to confidential information is limited to the audit team running the process and, where a file is under appeal, the members of the Independent Advisory Board reviewing it; those individuals are bound by the same obligation.
• Confidential information is not passed to third parties, is not used for marketing, and is not cited as a reference without the Organization's written consent.
• Statistical work uses only aggregated data that cannot identify the organization.

The obligations of the Organization

The Organization keeps the CHCO.tc™ materials shared with it during the process confidential.

• Measurement instruments, question sets, scoring logic and methodology documents may not be shared with third parties.
• These materials are used only to carry out the process, and only by the employees who need them.
• The CHCO.tc™ certificate and the byhuman™ trustmark are used only within the scope and the term of the certification.

Confidentiality for participants

Individual responses given in the employee, customer and stakeholder assessments are not shared with the Organization in an identifiable form. The Organization receives aggregated results and the analyses drawn from them.

This is not a courtesy but the guarantee that keeps the measurement objective: in a process where a response could be traced back to a person, cross-verification loses its meaning.

Exceptions to the obligation

The obligation of confidentiality does not apply where:

• the information has become public without being disclosed by either party;
• the information was lawfully learned from a source under no obligation of confidentiality;
• disclosure is required by a competent authority or by law. In that case the disclosing party informs the other as soon as it reasonably can.

Effect and term

The obligations of confidentiality take effect when the process begins and continue after the audit process has concluded.

They are not lifted by a certificate being withheld, by the process being abandoned, or by a certification coming to an end.

Protection of personal data

Personal data processed during the process is handled in line with the applicable legislation and with the principles set out in the CHCO.tc™ Personal Data Protection notice. This agreement does not replace that notice; it complements it.

Contact

For questions or requests concerning these confidentiality obligations, please get in touch.