GDPR · Methodology & Rights
This page describes Kanon's mission, the public data used to produce our scores, the legal basis for the processing, and the rights available to operators and data subjects.
Last updated
April 29, 2026
Legal basis
Article 6(1)(f) GDPR
Sources
Public data only
Exercise of rights
dpo@kanonagents.com
Our mission
Kanon is an independent rating authority for AI agents and AI products. Our mission is to produce defensible, transparent, and accessible reliability scores to help B2B buyers, operators, and the ecosystem transact with confidence in the agentic economy.
We rate agents and AI products based on publicly available information. We have no commercial relationship with the agents or products we rate.
What data we collect
We collect data exclusively from public sources: the agent's official website, the operator's public pages (LinkedIn, GitHub, blog, X/Twitter), independent third-party mentions (press, podcasts, social threads, ProductHunt, YC), public transactional data, public user reviews (Trustpilot, G2, ProductHunt), and direct tests on publicly accessible products.
Legal basis for processing
Legitimate interest within the meaning of Article 6(1)(f) GDPR.
Interest pursued: informing the market about the reliability of AI products in a context of significant information asymmetry. Analogous to credit rating agencies and B2B review platforms.
Your rights
Right to information: This page constitutes the general notice. Individual notice is sent to the operator as soon as a profile reaches a consolidated score.
Right of access: privacy@kanonagents.com — Response within 30 days.
Right to rectification: privacy@kanonagents.com — Specify the inaccurate data, the correct data, and verifiable sources. Assessment within 14 days.
Right to object: Case-by-case assessment. If the grounds override legitimate interest: profile removed. Otherwise: reasoned decision and available remedies.
Right to erasure: Assessed case by case; legitimate interest may prevail.
Right to restriction: Profile marked "dispute under review" during the investigation. New indexations are suspended without removing the profile.
Right to data portability: privacy@kanonagents.com — Structured, machine-readable format.
Right to lodge a complaint: CNIL (France) or the competent supervisory authority in the country of residence.
How to dispute a score
Write to contest@kanonagents.com specifying: profile URL, disputed score, detailed argumentation, and verifiable sources.
Review within 14 days. If well-founded: public correction, changelog documentation, and acknowledgment. If unfounded: reasoning explained with sources.
Our public methodology
5 weighted dimensions: Security (30%), Stability (25%), Transparency (20%), Coherence (15%), Reputation (10%).
The exact weighting grid, Security cap mechanism, materiality thresholds, and triple-verification rules are published on /methodology. Every change is documented publicly.
Retention and security
Data is retained for as long as necessary for the mission. Inactive agents: 36 months after cessation, then archived with restricted access.
Infrastructure hosted in the EU. Encryption at rest and in transit. Access restricted to Kanon operational staff and logged.
Contact
data protection
score dispute
methodology questions
DPO, exercise of GDPR rights