

Ortto
Based exclusively on public evidence • 20 criteria (Privacy + AI)
Last review: 21 Feb 2026
AI Trust Summary
- •Regarding AI: it does not document whether user behavior data is used for AI training, which can create uncertainties about data usage.
- •Regarding Core Privacy: it clearly identifies the data controller and data recipients, increasing customer trust in how their information is managed.
Safer Alternatives
Higher-rated software in the same category
Attention Points in AI (3)
AI criteria that require attention. Buy the Premium Analysis to see all 3 criteria.
- •Ortto
- •Does not state whether user behavior data is used for AI training, which creates uncertainties.
- •Omission of ethical AI principles and anti-bias measures may raise concerns about discrimination.
- •It is advisable to request clarification on data usage and ethical commitments in the contract.
Use of data for AI training is not disclosed
The policy mentions the use of collected data to improve website quality but does not clarify whether this data is used for AI training.
Ethical AI principles and anti-bias measures not documented
The policy does not mention commitments to the ethical use of AI, which may raise concerns about bias and discrimination.
Features using AI are not identified in the policy
The policy does not describe specific features that use AI, which can create uncertainties about data usage.
Source: vendor public documents
Compliances in AI (3)
AI criteria the company meets. Buy the Premium Analysis to see all 3 criteria.
- •Ortto
- •Clearly identifies the company's legal name and contact methods, increasing customer trust.
- •Lists specific recipients of user behavior data, ensuring clarity on data usage.
- •These practices facilitate due diligence and demonstrate a commitment to transparency.
AI training opt-out control available
The policy mentions generic controls but does not offer a specific opt-out for the use of user behavior data in AI training.
Use of artificial intelligence clearly disclosed in policies
The policy explicitly lists 'Ortto AI' as a feature, informing customers about the use of AI in their campaigns.
Contestation and human review of AI decisions available
The policy mentions the right to human intervention in automated decisions, ensuring customers can challenge AI-based decisions.
Source: vendor public documents
Highlights in Privacy (3)
Most relevant criteria for this category. Buy the Premium Analysis to see all 3 criteria.
Processing purposes clearly listed by data category
The policy connects categories of user behavior data and campaign interactions with specific purposes, ensuring transparency for customers.
Data controller identity and contact clearly disclosed
The policy provides clear information about Ortto's identity and how to contact them, increasing customer trust.
Privacy contact channel available
The policy offers specific channels for privacy inquiries, making it easier for customers to contact Ortto.
Source: vendor public documents
Critical Alerts
- •Princípios de IA ética e medidas anti-viés não documentados: Importante para a confiança dos clientes em relação ao uso de IA..
- •Funcionalidades que utilizam IA não são identificadas na política: Crucial para a transparência sobre como a IA é utilizada nas campanhas.
Conformance analysis (20)
Purposes of processing user behavior data clearly listed
Reference: ISO/IEC 27701 (7.3)
Data controller identity and contact clearly informed
Reference: ISO/IEC 27701 (7.3)
Contact channel for privacy issues available
Reference: ISO/IEC 27701 (7.3)
Source: vendor public documents
Follow this company and access all 20 criteria
Track score changes, get alerts on policy updates, and view the full conformance analysis
Don't miss any update
Sign up to follow this company and track changes in privacy and AI scores
Why trust the AITS Index: Open Community Audit
Public transparency, peer review and open evidence trails — all verifiable by the community
Trust guarantees
Peer review
users, professionals and experts confirm or contest items online.
Public history
vendor and index changes are versioned and accessible.
Participate
Evidence, confirmations and contestations
participate in the collaborative validation of AITS criteria
Understanding Ortto's Privacy and AI Governance: Strengths, Weaknesses, and Practical Guidance
Transparency in Data Control
Ortto excels in its transparency regarding data control, which is crucial for users concerned about privacy. With an impressive AITS Privacy Score of 94%, Ortto clearly identifies the data controller and the recipients of user behavior data. This clarity fosters trust among users, as they know who is handling their information and for what purposes. For users, this means they can confidently engage with the platform, knowing that their data is managed responsibly. It’s advisable for users to regularly review the data controller information provided in Ortto’s privacy policy to ensure they are comfortable with how their data is being used.
Clear Identification of Data Recipients
Another strength of Ortto is its clear identification of data recipients. This aspect is essential for users who want to understand where their data is going and who has access to it. By knowing the parties involved, users can make informed decisions about their data sharing preferences. Users should take advantage of Ortto's settings to customize data sharing options, ensuring that only necessary parties have access to their information. Regularly checking these settings can help maintain control over personal data.
Lack of Clarity on AI Training Data
Despite its strengths, Ortto has notable weaknesses, particularly concerning its use of user behavior data for AI training. The absence of clear documentation on whether user data is utilized for AI training raises concerns about data privacy and ethical use. With an AITS AI Score of 38%, users should be cautious about how their data might be leveraged in AI functionalities. To mitigate this risk, users should inquire directly with Ortto about their data usage policies and consider limiting the sharing of sensitive information until more clarity is provided.
Ethical AI Principles Not Documented
Furthermore, Ortto does not document its ethical AI principles or anti-bias measures, which can be a significant concern for users who prioritize ethical standards in AI applications. Without this information, users may be uncertain about how their data is treated in AI processes. It is advisable for users to actively seek out updates from Ortto regarding their AI governance practices and consider alternative platforms that provide clearer ethical guidelines if this is a critical factor for their marketing strategies.
Practical Settings to Enhance Privacy
To enhance privacy while using Ortto, users should regularly review and adjust their account settings. This includes enabling features that limit data sharing and opting out of any unnecessary data collection practices. Users should also familiarize themselves with Ortto's privacy policy, specifically sections related to data usage and sharing. By taking these proactive steps, users can better protect their personal information and ensure compliance with regulations like GDPR and LGPD.
Exploring Alternatives for Enhanced AI Governance
For users particularly concerned about AI governance, exploring alternative marketing automation platforms that offer clearer documentation on AI data usage and ethical practices may be beneficial. Platforms with higher AITS AI Scores and comprehensive ethical guidelines can provide more assurance regarding data handling. Users should evaluate their specific needs and consider conducting a thorough audit of potential alternatives to ensure they choose a platform that aligns with their privacy and ethical standards.
Other Marketing Automation software
Dive into in-depth research and analysis of each player
Source: vendor public documents
Analyzed Sources
Public documents used in the audit of Ortto:
Evidence, confirmations and contestations
participate in the collaborative validation of AITS criteria
Scope & Limitations
TrustThis/AITS assessments are based exclusively on publicly available information, duly cited with date and URL, following the AITS methodology (privacy & AI transparency).
The content is indicative in nature, intended for screening and comparison, not replacing internal audits.
TrustThis/AITS does not perform invasive tests, does not access vendor technology environments and does not process customer personal data. Conclusions reflect only the vendor's public communication at the date of collection.
Source: vendor public documents





