Privacy notice

Privacy Act of 1974

MHG Ascend is operated by Mason Harriman Group to administer an executive coaching program. This notice explains what the platform records, who can see it, and how it is protected.

↑

What is recorded

Administrative record: Your name, email address, organizational unit, coaching request, coach assignment, the dates and duration of sessions, hours used against hours authorized, journey stage, and the objective status you acknowledge.
Confidential layer: The content of coaching conversations, a coach's private session notes, the connection details for your sessions, individual assessment reports and individual survey answers.
Account and security: Sign-ins, failed sign-ins, authenticator enrolment, and the address a request came from, kept in a tamper-evident audit log.

The confidential layer is readable only by you and your assigned coach. No administrative role, including Mason Harriman Group's own administrators and the Department's Program Manager, can read it. Every attempt is recorded.

↑

Who can see the administrative record

Mason Harriman Group: Program administrators, to run the program: intake, matching, scheduling, reporting.
Your coach: Your engagement only, and only while assigned to you. A coach who takes over an engagement does not inherit the previous coach's notes.
The Department: The designated Program Manager and Contracting Officer's Representative receive participation and progress reporting as the program requires. Detailed coaching discussions and session content are never reported. Feedback survey results reach the Department only as de-identified averages, and only when five or more responses exist.
Nobody else: Records are not shared with, sold to or used by any other party.

↑

Privacy Act

Where records are maintained on behalf of a United States federal agency, they may be subject to the Privacy Act of 1974 and the agency's applicable System of Records Notice. Providing information is voluntary; without it the program cannot match you with a coach. Mason Harriman Group handles these records as a contractor under the agency's direction and uses them only to perform the program.

↑

Security

Access: A password and an authenticator app for every account. Sessions end after 30 minutes idle.
Storage: Confidential fields are encrypted in the database; uploaded files are stored encrypted in a private store. Data is held in the United States.
Audit: Every sign-in, every change to a record and every read of confidential material is written to a log that cannot be altered.
Backups: Encrypted nightly, kept for 35 days, restore tested.

↑

Your choices

See your record: Everything in your administrative record is visible to you on your own engagement page.
Correct it: Ask through the Help page, or your program administrator.
Leave the program: Your engagement is closed and your account deactivated. Records are retained and disposed of according to the agency's records schedule; they are not deleted on request while that schedule applies.
Questions: Signed out, use the contact form.