Privacy Policy
Version 1.1.0 - Last Updated: 8 May 2026
1. Introduction
Groundwork AI (“Groundwork”, “we”, “our” or “us”) is an AI-powered construction contract and commercial intelligence platform operated by Dynamic Labs Limited, a company registered in England and Wales (Company Number 16759203), with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
Groundwork helps users analyse and interpret construction and operational documentation including:
JCT contracts
NEC contracts
SBCC contracts
Framework Agreements
SLAs
Consultant appointments
Subcontract agreements
Amendments and schedules
Related commercial and operational documentation
We understand that construction contracts and commercial documents can contain highly sensitive information. Groundwork is designed to process documents responsibly, transparently and with security in mind.
For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Dynamic Labs Limited acts as the data controller of the personal data described in this Privacy Policy.
Contact us at: nikos@dynamicminds.ai
ICO Registration Number: ZC008205
2. Information We Collect
Account Information
We may collect:
Name
Company name
Email address
Login credentials
Subscription and billing information where applicable
Passwords are stored in hashed form and are not readable by Groundwork staff.
Uploaded Documents and Contract Data
Users may upload contracts, amendments, schedules and related commercial documentation for analysis.
These documents may contain commercially sensitive or confidential information depending on the nature of the project and organisation.
Groundwork processes uploaded documents in order to:
Analyse contractual risks
Extract obligations and deadlines
Generate AI-assisted summaries
Support commercial workflows
Enable contextual Q&A functionality
Usage and Technical Data
We may collect technical and operational information including:
Login activity
Browser and device information
IP addresses
Error logs
Feature usage
Analysis activity
Performance and diagnostic information
This information helps us operate, secure and improve the platform.
Feedback and Interaction Data
Where users interact with AI outputs, we may collect:
Feedback ratings
Risk confirmations
Correction signals
Q&A interaction metadata
Negotiation-support interactions
Product feedback and support requests
This information helps improve Groundwork’s workflows and contract intelligence systems over time.
3. How We Process Documents
Groundwork uses AI-assisted technologies and commercial AI infrastructure to analyse uploaded documents.
Documents may be processed using carefully selected third-party enterprise AI providers through secure commercial API infrastructure.
Groundwork does not use uploaded customer contracts or documents to train public-facing AI models such as ChatGPT or Claude.
We use AI technologies to assist with:
Contract interpretation
Risk identification
Obligation extraction
Commercial analysis
Workflow support
Plain-English summaries
Contextual Q&A functionality
Groundwork is designed to support construction and commercial intelligence workflows rather than build public AI training datasets.
4. Structured Intelligence and Platform Improvement
Where users have explicitly opted in to model and platform improvement, Groundwork may extract limited structured intelligence from analysed documents.
This may include:
Clause excerpts
Risk indicators
Obligation classifications
Contract metadata
User feedback signals
Q&A categories and confidence scores
Negotiation-support interactions
Aggregated operational insights
This information may be stored separately from the original uploaded contract in dedicated intelligence datasets and system tables.
Groundwork applies automated anonymisation and redaction measures before storing this intelligence data. These measures are designed to remove common forms of personally identifiable or commercially sensitive information, including:
Email addresses
UK phone numbers
Monetary amounts
Dates
Postcodes
Company numbers
Certain detected party names
These anonymisation measures are automated and rely on pattern-based detection methods. While designed to reduce identifiable information, they may not identify every possible item of personal, commercial or sensitive data, particularly where information appears in unusual formats or outside expected document sections.
For this reason, users are strongly encouraged to redact highly sensitive information before uploading documents where appropriate.
Groundwork does not currently use these intelligence datasets to train proprietary foundation AI models. These datasets may instead be used for:
Product evaluation
Workflow improvement
Risk-detection refinement
Prompt optimisation
Performance analysis
Internal testing
Quality assurance
No intelligence data is stored for improvement purposes unless the user has explicitly opted in.
5. Ownership of Uploaded Documents
Users retain ownership of all uploaded contracts, documents and associated content.
Uploading a document to Groundwork does not transfer ownership rights to us.
Users are responsible for ensuring they:
Have the legal right to upload documents
Have obtained any necessary permissions or consents
Comply with confidentiality obligations and applicable laws
6. Security Measures
Groundwork uses commercially reasonable technical and organisational measures designed to help protect user information and uploaded documents.
Security measures may include:
Secure cloud infrastructure
Controlled access permissions
Authentication systems
Encrypted data transmission
Database access controls
Logging and monitoring systems
While we take security seriously, no online platform or storage system can guarantee absolute security or uninterrupted protection from unauthorised access.
Users acknowledge that they upload and process documents through the platform at their own discretion and risk.
7. Third-Party Providers and International Transfers
Groundwork relies on a limited number of carefully selected third-party providers to operate the platform and deliver AI-assisted functionality. Each provider is subject to contractual obligations designed to protect customer data and apply appropriate security measures.
| Sub-processor | What we use them for | Where they process | Transfer mechanism |
|---|---|---|---|
| Replit, Inc. (Google Cloud Platform) |
Application hosting and PostgreSQL database infrastructure used to store accounts, uploaded contracts, reports and operational data. | United States* | EU Standard Contractual Clauses + UK International Data Transfer Addendum |
| Anthropic, PBC | Generates AI-assisted contract analysis and contextual Q&A functionality using Claude enterprise APIs. Anthropic does not train its public models on customer API inputs. | United States | EU Standard Contractual Clauses + UK International Data Transfer Addendum |
| Voyage AI, Inc. | Generates vector embeddings and search-index intelligence used to identify relevant sections of uploaded contracts during analysis. | United States | EU Standard Contractual Clauses + UK International Data Transfer Addendum |
* Groundwork may update hosting regions or infrastructure providers as the platform evolves.
Groundwork seeks to minimise the personal information shared with third-party AI providers where reasonably possible. User account identifiers such as names and email addresses are not intentionally included within AI prompts or embedding requests unless operationally required.
Where international transfers occur, Groundwork uses commercially reasonable safeguards intended to support UK GDPR and applicable data protection obligations, including contractual transfer mechanisms where appropriate.
8. Data Retention
Groundwork retains data only for as long as reasonably necessary to:
Deliver platform services
Maintain system functionality
Improve workflows and performance
Meet legal and regulatory obligations
Resolve disputes
Enforce agreements
Unless otherwise required:
Deleted contracts and reports may remain in backup or operational systems for up to 30 days before permanent removal
Contracts not revisited for extended periods may be automatically removed after defined retention periods
Inactive accounts may be reviewed and removed after extended inactivity
Certain anonymised or structured intelligence records derived from opted-in users may remain after contract deletion where they no longer reasonably identify an individual, organisation or project.
9. GDPR and UK Data Protection Rights
Subject to applicable law, users may have rights including:
Access to personal data
Correction of inaccurate data
Erasure of personal data
Restriction of processing
Objection to processing
Data portability
Withdrawal of consent at any time
Requests may be submitted to:
nikos@dynamicminds.ai
Users also have the right to lodge complaints with the UK Information Commissioner’s Office (ICO).
10. Cookies and Analytics
Groundwork may use cookies and similar technologies to:
Maintain login sessions
Improve website functionality
Monitor platform performance
Support analytics and security functions
We do not currently use third-party advertising cookies.
Users may manage cookies through browser settings where available.
11. Jurisdiction and Governing Law
Groundwork may process contracts governed by different legal systems including:
Scottish law
English law
Other international jurisdictions where supported
Outputs and analysis may vary depending on:
Governing law
Contract type
Jurisdiction
Project-specific wording
Commercial context
Users remain responsible for obtaining professional legal or commercial advice appropriate to their jurisdiction and circumstances.
12. Important Disclaimer
Groundwork assists with contract and commercial analysis but does not provide legal advice, professional consultancy services or legally binding recommendations.
AI-generated outputs:
May contain inaccuracies
May omit risks or obligations
May not reflect the full legal or commercial position
Should not be relied upon as a substitute for professional review
Users should ensure outputs are reviewed by appropriately qualified professionals, including solicitors, quantity surveyors, commercial managers or other relevant specialists where appropriate.
Groundwork accepts no liability for decisions made solely on the basis of AI-generated outputs except where liability cannot lawfully be excluded.
13. Product Development and Testing
Groundwork is an evolving software platform and certain features, workflows and AI-assisted capabilities may continue to develop, change or improve over time.
Users acknowledge that:
Certain features may be experimental or in testing phases
Outputs and workflows may evolve
Risk detection systems may be refined continuously
Platform functionality may change without prior notice
We may use anonymised, aggregated or structured operational insights derived from opted-in platform usage to support:
Internal testing
Product evaluation
Workflow optimisation
Quality assurance
System improvement
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
Changes to the platform
Operational developments
Legal or regulatory requirements
Security or infrastructure updates
Updated versions will be published through the Groundwork platform or website.
Where changes are material, users may be asked to review and re-accept the updated policy.
15. Contact Us
For privacy, data protection or deletion requests, please contact:
Groundwork AI
Dynamic Labs Limited
71-75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom
Email: nikos@dynamicminds.ai
