Data and security
For supplier and data protection checks: what the trial pack processes, where it goes and what is kept. In short, the tools collect no personal data, and nothing a business types reaches a trial partner or us.
What is typed, and where it goes
| What | Where it goes | What is kept |
|---|---|---|
| Answers to the funding options questions, ticks on checklists, calculator inputs, filters | Nowhere: worked out in the browser. Answers are kept in the page address after the # sign, which browsers never send to a server. | Nothing. Lost when the page is closed, unless the user keeps the link. |
| Adviser's notes (adviser mode) | Nowhere: held in the results page only, not in the link. | Nothing. Lost when the page is closed; included only in what the adviser prints or downloads. |
| Company check: a company name or number, if the user chooses to search | Our server, which asks Companies House for the public record and returns it. Sent in the body of the request, not the address. | Nothing logged, cached or stored. |
| "Something wrong or out of date?" form on route and calculator pages: no name or email asked | Our server passes the page address and the message to Resend, an email delivery service, which delivers it to our mailbox. | Nothing on the site. The email is deleted once dealt with, within 12 months at most. |
| "Describe your business" box | Not in the trial pack or adviser mode. On the main site only, where it sends the text to Anthropic to pick out answers. | Not used in the trial pack. |
Hosting
- Cloudflare Workers. Pages are built in advance and served as they are; there is no database and no user account.
- Cloudflare's servers process technical information such as IP addresses to deliver pages and keep the service secure. We have not switched on Cloudflare's logging of requests to our site.
Cookies, tracking and scripts
- No cookies. No analytics of any kind (since 21 October 2026). No advertising, tracking pixels or third-party scripts.
- Fonts are served from our own site, so a visit makes no request to a font service.
- The videos come from media.fundladder.uk, our own storage on Cloudflare (R2): the first picture and the captions load with the page, the video only when someone presses play. Nobody is counted.
The embed
- The embed is the only page another site may show in a frame. Every other page tells browsers to refuse (Content-Security-Policy frame-ancestors).
- The embed comes from fundladder.uk, so the page showing it cannot read what a business does inside it. Links open fundladder.uk in a new tab. It sets no cookies.
Accuracy of the content
- Every route cites at least one primary source (such as GOV.UK, HMRC, the FCA or the British Business Bank) with the date it was read. The automated checks fail any route without one.
- Routes not checked for 180 days are flagged on the page and in a weekly report, which also checks every source link and the policy changes we are watching.
- The checks run on every change: content, lint, type checks, unit tests, a production build and browser tests on desktop and phone widths.
How results are worked out
- Fixed rules written down for each route, tested against eight example businesses with expected results. AI never decides a result.
- Information, not advice: types of finance and categories of provider, no product or lender named in results. Fundladder does not arrange or sell finance and is not authorised by the FCA.
Who runs it
- Fundladder is operated by Avant Partners Limited, the data controller for the little described here.
- Privacy notice: fundladder.uk/privacy. Questions, and anything else your supplier checks need: data@fundladder.uk.
Back to the trial pack · trial terms