The small print, in large print

Where AI is used,and where it is not.

The short version

Every finding in a Mendbird report comes from something the check actually saw, using rules written by people. Your data is never used to train someone else's AI.

The check and the report

Today the check uses no AI. It reads your site and applies fixed rules that people wrote and tested: a version older than the one with the fix, a padlock that runs out next week, a missing email record. The grades, the advice and the "ask your developer" lines all come from those rules, so the same site gets the same report.

Where we may use AI

We are working on plain English write-ups and fix plans written by a small model we trained ourselves, running on Cloudflare. If we add it, it will:

only read what the check found, so it cannot add problems the check did not see;
never decide how serious something is; the rules still do that;
be tested against plans checked by people before it goes live;
be labelled wherever its words appear.

Your data and AI

We never send your details, your site's address or your reports to outside AI companies, and never let anyone train their models on them. The only data we learn from is what checks found, with the address and name taken out, and you can switch that off with the "Keep this check private" tick box. The privacy notice has the detail.

People stay in charge

Quotes are written and fixes are done by a real person. Nothing changes on your site unless that person has agreed it with you first.

How Mendbird is built