The ODMind AI mark, and how we treat your data.
One mark, one type system, one colour language — and a plain description of our GDPR position, so a CEO or DPO can review both in a single sitting.

The mark reads as an organisational chart lifted by an arc: four connected nodes for HR, Finance, Legal and IT, and a single upward curve for the quarterly maturity trajectory. Keep clear space of at least the height of one node on every side. Never recolour the nodes, rotate the arc, place the mark on a busy photograph, or set it below 20 px.
Primary actions, scores, progress
Secondary data series, links
Headlines and body copy
Supporting and technical labels
Attention states, gaps to peers
Canvas
Every colour ships as a semantic token. Product code references the token, never a raw hex value, so the palette can shift without touching a component.
Archivo — headlines
IBM Plex Sans — body copy, tables and form labels. Set at 15–16 px with generous line height for long assessment questions.
IBM Plex Mono — 3.4 / 5 · 2026-Q3 · €810,900
Scores, quarters and currency always set in mono with tabular figures, so columns line up in exports.
- Evidence before adjectives. Name the source and the quarter, then the conclusion.
- Reproducible. Any figure we show, a CFO can recalculate from assumptions printed on the same page.
- Human-approved. The system proposes; the client approves. We never write as if the software decided.
- No hype. No “revolutionary”, no “game-changing”. Mid-market German management reads restraint as competence.
ODMind AI processes assessment answers, maturity scores, roadmap approvals, ROI inputs and invoice records on behalf of each client company. The client is the controller; ODMind AI acts as processor under Art. 28 GDPR, governed by a data processing agreement signed before the first assessment.
Data minimisation
We collect no employee-level personal data. Assessments record function-level ratings and organisational inputs (headcount band, hourly rate, routine hours). The only personal data stored is the account holder's work email address, used for authentication and service notices.
Hosting & transfers
Application data is stored in EU-region managed infrastructure with encryption in transit (TLS 1.2+) and at rest. Where a sub-processor operates outside the EEA, transfers rely on the EU Standard Contractual Clauses plus supplementary technical measures.
Legal bases
Account and workspace data: performance of a contract (Art. 6(1)(b)). Security logging and fraud prevention: legitimate interests (Art. 6(1)(f)). Anonymised peer benchmarking uses aggregate statistics only and falls outside personal data entirely.
Retention & deletion
Workspace content is retained for the term of the subscription plus 90 days, then deleted. Invoice records are kept for the statutory retention period (10 years, §147 AO / Art. 958f OR). Deletion on request is executed within 30 days.
Tenant isolation
Every company works in its own private workspace. Row-level security ties each record to its owning client, so no account can read another company's answers, scores, roadmap, ROI figures or invoices — benchmark comparisons use anonymised, clearly labelled peer aggregates.
Your rights
Access, rectification, erasure, restriction, portability and objection under Art. 15–21 GDPR. Requests go to the client's own DPO first; we support them as processor and respond within one month. Complaints may be lodged with the competent supervisory authority.
Trading name: ODMind AI. Data protection enquiries and DPA requests: privacy@odmind.ai. Registered entity details, managing director, commercial register number and VAT ID are inserted in the imprint once the operating company is confirmed — they must be legally accurate, so they are deliberately not invented here.