How we handle data
GroundWork is built on a deliberate principle: the sensitive details of your premises never leave your device. A central store of sites’ layouts and vulnerabilities is exactly what the legislation exists to protect - so we didn’t build one.
Sensitive · never transmitted to us
Created - and fingerprinted - inside your browser. We can’t retrieve it, because we never receive it.
Non-sensitive index · to enable verification
No coordinates. No procedures. No floor plans. Nothing describing how your premises is laid out or protected.
The line between the two is simple: public identifiers and limited verification metadata can be indexed; anything describing how your premises is laid out, operated or protected stays with you.
How verification works
Because we hold a cryptographic fingerprint of each document, its authenticity can be confirmed without us ever holding the document itself.
Someone scans the QR code on a document, or enters its reference at our verification page.
The reference is matched against our non-sensitive index of issued documents.
A limited, non-sensitive result is returned - never the contents of the document.
One-off verification lets anyone you show a document to - an event organiser, a partner or an inspector - confirm it is genuine, its version, its status and when it was created.
Bulk verification lets an authorised party holding a set of references - for example an insurer whose customers have given them their references - confirm authenticity and currency across many documents at once. It returns only non-sensitive validation data, never the contents of any document.
Verification confirms that a document is genuine and when it was created. It does not certify the document’s contents or confirm compliance with the law.
Sharing with insurers
An insurer must obtain the relevant document references from their own customers - the sites themselves. We do not provide, sell or supply lists of customers or references to insurers.
Validation returns existence, status, version, dates and organisation identity for matching. It never returns premises detail, procedures or locations. Access is granted only to authorised parties, and can be withdrawn.
An insurer can only validate a document whose reference the site chose to give them.
No sale · no AI training
We do not sell your data. We do not share it for advertising or marketing. We do not use it, and do not permit it to be used, to train artificial intelligence or machine-learning models.
This isn’t only a policy - it’s structural. Because your sensitive premises data is never stored on our servers, there is no dataset of it for any AI or language model to be trained on - ours or anyone else’s. The protection is built into how the system works.
Build a structured readiness document without creating an account or handing over sensitive premises detail.