Physicians for AI Safety

Privacy notice

Last updated 26 September 2026

In short: we collect only what a signature needs. Your email address is never published. You can withdraw your signature at any time by writing to [email protected]. This website uses no analytics, advertising or tracking cookies.

Who is responsible

Physicians for AI Safety is an independent initiative and not a registered organisation. Its three founders are jointly responsible for your data (joint controllers):

  • Erik Jentzen, Basel, Switzerland
  • Esha Khurana, Pittsburgh, United States
  • Richard Armitage, Nottingham, United Kingdom

Postal address: c/o Esha Khurana, 1655 Shady Ave, Pittsburgh, PA 15217, United States. For every privacy question, write to [email protected]. We read this address ourselves.

What we collect when you sign

  • Your title if you choose one, full name, email address, degree (or that you are a medical student), specialty and country.
  • Your institution (hospital, practice or university), if you enter one.
  • Your choices: whether your name is listed publicly, whether you would like to help build the initiative, and whether you want updates.
  • How you found the statement, if the link you followed contained a reference or your browser passed on the name of the previous website (for example “linkedin.com”).
  • When you signed, confirmed and were reviewed, and which version of this notice you agreed to.

We do not ask for phone numbers, dates of birth or licence numbers.

What is published

If you choose to be listed: your title, name, degree, specialty, institution and country. If not, your signature is only counted. Your email address is never published.

How signing works

After you submit the form, we send you an email with a confirmation link. Once you confirm, one of us reviews the signature by hand to keep the list credible, and then publishes it. We send you a short email when it is live.

Why we process your data

  • To record, verify and, if you choose, publish your signature. Legal basis: your consent (Art. 6(1)(a) GDPR).
  • To contact you if you said you would like to help, and to send updates if you asked for them. Legal basis: your consent.
  • To keep the form free of bots and abuse. Legal basis: our legitimate interest in a trustworthy list of signatures (Art. 6(1)(f) GDPR).

A public signature can reveal your views on how AI should be governed. Data protection law may treat this as a political opinion, which is specially protected. We therefore process it only with your explicit consent (Art. 9(2)(a) GDPR), which you give by ticking the boxes in the form and confirming by email.

The same purposes apply under the Swiss Federal Act on Data Protection (FADP). You can withdraw your consent at any time, with effect for the future.

Service providers

We use a small number of providers who process data on our behalf:

  • Cloudflare hosts this website, runs the bot check on the form (Turnstile) and stores the signatures. The database is set to Cloudflare’s EU jurisdiction, so signatures are stored in the European Union.
  • Resend sends the confirmation and notification emails. Our sending region is Ireland, in the European Union.
  • Google Workspace provides our inbox. Notifications about new signatures, and any email you send us, are stored there.

When you use the form, the bot check processes technical information from your browser, including your IP address. We do not store your IP address.

Cloudflare, Resend and Google are companies based in the United States. Where data may be processed outside Switzerland or the European Union, we rely on the safeguards these providers offer, such as the EU Standard Contractual Clauses. One of us works from the United States and can access the data from there.

We do not send updates yet. Before the first one, we will name the newsletter service here.

How long we keep your data

  • Signatures that are never confirmed are deleted automatically after 30 days.
  • Signatures we do not publish after review are deleted automatically 30 days after the review.
  • Confirmed signatures are kept for as long as the statement is online, or until you withdraw.
  • Emails you send us are kept as long as we need them to answer you.

Your rights

You can ask us at any time what we store about you, and have it corrected, deleted or handed to you in a common format. You can withdraw your consent and object to processing. Write to [email protected]; we answer within 30 days and complete deletions within 30 days.

You can also complain to a data protection authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the European Union the authority in your country.

Cookies and tracking

This website sets no cookies of its own and uses no analytics or advertising tools. Our fonts are served from our own site. The bot check from Cloudflare runs only on the signing form.

Changes to this notice

If we change this notice, we update the date above. If a change affects how we use your signature, we ask for your consent again.