Privacy Policy

Last updated: June 2026

This page explains what happens to the information you give us when you use the NZ Cyber Risk Check. Anvil Solutions Limited handles your information in line with the New Zealand Privacy Act 2020.

What we collect

When you complete the Risk Check, we collect your answers to the assessment questions and the contact details you provide, such as company name, industry, staff and device counts, current vendor, renewal month, and email address.

How we use it

We use your answers and contact details to:

• generate your insurance-readiness score and your written report. The report is drafted with AI assistance and then reviewed by an Anvil team member before it is sent to you; and
• contact you about your results and about Anvil products and services that may be relevant to you.

You can opt out of marketing contact at any time by replying to any message from us or by emailing support@anvil.net.nz.

AI, service providers and overseas processing

To run the Risk Check and prepare your report, we use a small number of service providers who process your information on our instructions:

• Anthropic generates your written report from your answers, on servers in the United States. Anthropic processes this data only to produce your report and does not use it to train its models.
• Cloudflare provides the infrastructure that serves this website and receives your submission.
• SMTP2GO delivers the emails containing your record and your report.
• Google reCAPTCHA runs in your browser to protect the form from automated abuse; to do this Google receives limited technical information, including your IP address, under Google's Privacy Policy and Terms of Service. This site also loads web fonts from Google.

Some of these providers are based or process data overseas, including in the United States. We do not sell your information, and we do not share it with anyone other than the providers described here, who act only on our instructions.

How long we keep it

Your completed report is emailed to you and a copy is retained in Anvil's mailbox. We keep your submission only for as long as it is needed for the purposes above, and no longer than 24 months, or until you ask us to delete it, whichever comes first.

How we protect it

Access to your submission is restricted to Anvil Solutions staff who need it. Data is transmitted over encrypted connections, and our mailbox is protected by access controls and multi-factor authentication.

Your rights

Under the Privacy Act 2020 you can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Email support@anvil.net.nz or call 09 579 5432 and we will action your request. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz.

Questions

If you have any questions about this policy or how your information is handled, contact Anvil Solutions on 09 579 5432 or support@anvil.net.nz.