Home / Policy / Right of reply

Right of reply

If your company appears in our archive and you believe the rating is incomplete, outdated, or wrong, we will publish your response.

What we will publish

• Your response, up to 800 words, attributed to a named author at your organization.
• Up to five links to primary sources you wish to cite (vendor policies, court filings, audits, etc.).
• The date we received the response.

Your response is attached to the original rating page; it does not replace the original rating. If your response materially changes our assessment, we will issue a follow-up rating and link both versions.

What we will not do

• Delete the original rating without a published correction. (See corrections policy.)
• Negotiate edits to the original rating in private. Public claims warrant public responses.
• Publish responses that contain unverified personal attacks on the analyst or third parties.

How to submit

Send a single email containing the response text, the rating URL, the named author, and the named contact at your organization to rebuttal at hectec dot org. We acknowledge receipt within five business days and publish within fourteen.

Why this exists

A public archive that grades organizations on privacy has a duty to give those organizations a public reply path. This is consistent with established journalistic practice and is part of how we keep the archive fair.