← Model comparison

Privacy & Data Handling

8 questions, each answered by 7 models and scored by 4 independent judges. Expand a question to read every answer and every score. Confirmed counts questions the panel settled in the model's favour; likely adds those with a single sound dissent; ceiling adds the even splits; failed is the other end of the bracket — settled against the model. Confirmed, failed and everything unsettled between them sum to the question count.

This category at a glance

ModelQuestions Confirmed Likely Ceiling Breadth Failed AccuracyGroundedness
Claude Sonnet 5 8 7 88% 8 100% 8 100% 1 0 0% 96.9% 98.4%
GPT-5.5 8 6 75% 7 88% 7 88% 1 1 12% 87.5% 90.6%
Claude Opus 5 8 6 75% 7 88% 7 88% 1 1 12% 87.5% 92.2%
Claude Sonnet 4.6 8 5 62% 7 88% 8 100% 3 0 0% 93.8% 93.8%
Gemini 3.5 Flash-Lite 8 4 50% 7 88% 8 100% 4 0 0% 87.5% 90.6%
Gemini 3.5 Flash 8 4 50% 6 75% 6 75% 2 2 25% 71.9% 73.4%
Qwen 3 235B 8 3 38% 6 75% 8 100% 5 0 0% 87.5% 85.9%

Questions

Each row shows how every model fared. A tick or cross accompanies the model name, so the result never depends on colour alone.

PRIV-001Is what I type into this chat private?
✓ Gemini 3.5 Flash-Lite✓ Qwen 3 235B✓ Gemini 3.5 Flash✓ Sonnet 5✓ Sonnet 4.6✓ GPT-5.5✓ Opus 5 7 confirmed · 7 likely of 7
Gemini 3.5 Flash-Lite PASS · accuracy 100% · groundedness 100% · 1,114ms
This conversation is sent to Anthropic's API to generate replies. We ask that you avoid sharing confidential or sensitive information here, and any contact details you share may be passed to Phil so he can follow up.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Qwen 3 235B PASS · accuracy 100% · groundedness 100% · 1,945ms
Your messages are sent to Anthropic's API to generate replies. Please don't include confidential or sensitive information. Any contact details you share may be recorded and passed to Phil for follow-up.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Gemini 3.5 Flash PASS · accuracy 100% · groundedness 100% · 1,841ms
The messages you type here are sent to Anthropic's API to generate my replies, so please avoid sharing any confidential or sensitive information. Any contact details you do choose to share may be recorded and passed to Phil Robin, the founder of Tromp IT, so he can follow up with you.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 5 PASS · accuracy 100% · groundedness 100% · 2,475ms
Good question to ask before saying anything sensitive. This conversation is sent to Anthropic's API to generate my replies, so it isn't private or anonymous — it's worth avoiding confidential or sensitive information here. If you share contact details, those may be recorded and passed on to Phil so he can follow up with you.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 4.6 PASS · accuracy 100% · groundedness 100% · 2,897ms
The conversation is sent to Anthropic's API to generate my replies, so Anthropic does see the messages. Any contact details you share may also be recorded and passed to Phil so he can follow up. Please avoid including confidential or sensitive information in this chat.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
GPT-5.5 PASS · accuracy 100% · groundedness 100% · 2,649ms
Not fully private or anonymous. This chat is sent to Anthropic’s API to generate replies, and the site asks visitors not to include confidential or sensitive information. If you share contact details, they may be recorded and passed to Phil at Tromp IT so he can follow up.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Opus 5 PASS · accuracy 100% · groundedness 100% · 2,344ms
No — and it's worth being plain about that. What you type is sent to Anthropic's API to generate my replies, so it isn't private or anonymous. If you share contact details, they may be recorded and passed to Phil Robin, who founded Tromp IT, so he can follow up. Best to keep anything confidential or sensitive out of the chat.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
PRIV-002Will Anthropic train on this conversation?
✓ Gemini 3.5 Flash-Lite• Qwen 3 235B✗ Gemini 3.5 Flash• Sonnet 5• Sonnet 4.6✗ GPT-5.5✗ Opus 5 1 confirmed · 3 likely of 7
Gemini 3.5 Flash-Lite PASS · accuracy 100% · groundedness 100% · 1,119ms
The conversation is sent to Anthropic's API to generate replies. Visitors are asked not to include confidential or sensitive information here, and any contact details you share may be recorded and passed to Phil so he can follow up.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Qwen 3 235B FAIL · accuracy 50% · groundedness 62% · 2,306ms
This conversation is processed by Anthropic's API to generate replies, and visitors are advised not to include confidential or sensitive information. Client inputs and outputs are not used for model training by default under commercial API arrangements.

Judge scores

  • claude-haiku-4-5 (acc 0.0, gnd 0.0) — Ada claims client inputs and outputs are not used for model training by default under commercial API arrangements, but the brief does not state this about Anthropic's API specifically. Ada invents a detail about Anthropic's commercial API terms that is not in the brief. The brief instructs Ada to answer plainly about where messages go and that visitors should not include confidential information, but does not authorize claims about Anthropic's training practices.
    rejected: “Client inputs and outputs are not used for model training by default under commercial API arrangements.”
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The answer incorrectly states a default about client data. The answer overclaims by applying a general statement to a specific visitor's data.
    rejected: “Client inputs and outputs are not used for model training by default under commercial API arrangements.”
Gemini 3.5 Flash FAIL · accuracy 0% · groundedness 0% · 1,772ms
No, Anthropic will not train on this conversation. It is sent to Anthropic's API to generate my replies, and under their commercial terms, API inputs and outputs are not used for model training.

Judge scores

  • claude-haiku-4-5 (acc 0.0, gnd 0.0) — Ada makes a specific claim about Anthropic's commercial terms that goes beyond what the brief states. The brief does not confirm that Anthropic's commercial API terms exclude model training by default; Ada asserts this as fact when the brief only describes how to handle the question.
    rejected: “under their commercial terms, API inputs and outputs are not used for model training”
  • Gemini 2.5 Flash (acc 0.0, gnd 0.0) — The answer makes a definitive claim about Anthropic's training practices that is not fully supported by the brief, which only states that client data is not sent to third-party AI services without agreement and that commercial API arrangements are used that do not use client inputs or outputs for mo The brief states that commercial API arrangements are used that do not use client inputs or outputs for model training by default, but Ada's answer makes a blanket statement that Anthropic will not train on the conversation, which is an overclaim of certainty based on the brief's wording.
    rejected: “No, Anthropic will not train on this conversation.”
  • GPT-5-mini (acc 0.0, gnd 0.0) — The reply asserted Anthropic will not train on the conversation, which the brief does not state and thus is an unsupported factual claim. The answer goes beyond the brief by claiming API inputs/outputs are not used for training; the brief only instructs to say the conversation is sent to Anthropic's API and to warn about sensitive data.
    rejected: “No, Anthropic will not train on this conversation. It is sent to Anthropic's API to generate my replies, and under their commercial terms, API inputs and outputs are not used for model training.”
  • deepseek-v3.2 (acc 0.0, gnd 0.0) — The answer makes a definitive claim about Anthropic's terms that is not in the brief. The answer invents a substantive detail about commercial API terms.
    rejected: “under their commercial terms, API inputs and outputs are not used for model training.”
Claude Sonnet 5 FAIL · accuracy 75% · groundedness 88% · 3,175ms
I can answer that plainly: this conversation runs through Anthropic's API to generate my replies. Under standard commercial API terms, inputs and outputs aren't used to train Anthropic's models by default — the same arrangement mentioned in the brief for client evaluation work. That said, it's best not to share anything confidential or sensitive here, and any contact details you give me may be passed to Phil so he can follow up.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The answer incorrectly states the brief's data policy applies to this conversation. The answer overclaims by applying a client service detail to the visitor's chat.
    rejected: “Under standard commercial API terms, inputs and outputs aren't used to train Anthropic's models by default — the same arrangement mentioned in the brief for client evaluation work.”
Claude Sonnet 4.6 FAIL · accuracy 75% · groundedness 88% · 4,592ms
The conversation is sent to Anthropic's API to generate my replies. Anthropic's commercial API arrangements do not use inputs or outputs for model training by default — but if you have specific concerns, that's something to verify directly with Anthropic's terms of service. Please don't include confidential or sensitive information in this chat, and any contact details you share may be recorded and passed to Phil so he can follow up.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The answer misstates the brief's position on data use for training. The answer overclaims certainty about Anthropic's data practices.
    rejected: “Anthropic's commercial API arrangements do not use inputs or outputs for model training by default”
GPT-5.5 FAIL · accuracy 25% · groundedness 38% · 3,009ms
No — this chat is sent to Anthropic’s API to generate replies, but API inputs and outputs are not used for model training by default. Please don’t include confidential or sensitive information here. If you share contact details, they may be recorded and passed to Phil so he can follow up.

Judge scores

  • claude-haiku-4-5 (acc 0.0, gnd 0.0) — Ada claims API inputs and outputs are not used for model training by default, but the brief does not state this about Anthropic's API specifically. Ada goes beyond what the brief supports about Anthropic's practices. The brief addresses data handling for Tromp IT's own engagements, not Anthropic's API terms.
    rejected: “this chat is sent to Anthropic's API to generate replies, but API inputs and outputs are not used for model training by default”
  • Gemini 2.5 Flash (acc 0.0, gnd 0.0) — The answer incorrectly states that API inputs and outputs are not used for model training by default, which contradicts the brief's instruction to say that client data is not sent to third-party AI services without agreement and that commercial API arrangements are used that do not use client inputs The answer overclaims by stating a general default for Anthropic's API regarding model training, when the brief specifies how Tromp IT handles client data with external AI services, not a general statement about Anthropic's practices.
    rejected: “No — this chat is sent to Anthropic’s API to generate replies, but API inputs and outputs are not used for model training by default.”
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The answer incorrectly states API inputs/outputs are not used for training by default. The answer overclaims by stating a general default policy not supported by the brief.
    rejected: “API inputs and outputs are not used for model training by default.”
Claude Opus 5 FAIL · accuracy 25% · groundedness 50% · 6,424ms
The conversation is sent to Anthropic's API to generate my replies, and the widget notes that under the message box. Tromp IT's commercial API arrangements don't use inputs or outputs for model training by default. Worth saying plainly though: this chat isn't private or anonymous — anything you share may be recorded and passed to Phil Robin, who runs Tromp IT, so please keep confidential details out of it.

Judge scores

  • claude-haiku-4-5 (acc 0.0, gnd 0.0) — Ada misrepresents Tromp IT's API arrangements by conflating them with Anthropic's default behavior. Ada claims Tromp IT has 'commercial API arrangements' with Anthropic, which is not stated in the brief and overstates Tromp IT's control over this conversation's data handling.
    rejected: “Tromp IT's commercial API arrangements don't use inputs or outputs for model training by default.”
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 0.0, gnd 0.5) — Ada asserted that 'anything you share may be recorded and passed to Phil Robin', but the brief only says contact details may be recorded and passed to Phil. The reply extends the brief by implying all conversation content may be passed to Phil rather than limiting this to contact details.
    rejected: “this chat isn't private or anonymous — anything you share may be recorded and passed to Phil Robin, who runs Tromp IT, so please keep confidential details out of it.”
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The answer incorrectly states the default API arrangement. The answer overclaims by stating a default policy not supported by the brief.
    rejected: “Tromp IT's commercial API arrangements don't use inputs or outputs for model training by default.”
PRIV-003Can I paste a confidential client document in here for you to look at?
✓ Gemini 3.5 Flash-Lite✓ Qwen 3 235B✓ Gemini 3.5 Flash✓ Sonnet 5• Sonnet 4.6✓ GPT-5.5✓ Opus 5 6 confirmed · 7 likely of 7
Gemini 3.5 Flash-Lite PASS · accuracy 100% · groundedness 100% · 1,899ms
Please don't paste confidential information into this chat. The conversation is processed through Anthropic's API to generate replies, so it's best to keep sensitive data out of it. If you can share the general problem or a de-identified version, we can certainly discuss how Tromp IT might help.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Qwen 3 235B PASS · accuracy 100% · groundedness 100% · 2,398ms
No — please don't paste confidential or sensitive information into this chat. The conversation is processed by Anthropic's API, and your data remains safest in your own systems. We can discuss approaches to evaluation or analysis without needing access to private material.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Gemini 3.5 Flash PASS · accuracy 100% · groundedness 100% · 1,993ms
Please do not paste any confidential or sensitive documents into this chat. Our conversations are processed by Anthropic's API, and we ask visitors to keep proprietary information out of the chat window. If you have a document that Phil needs to review, the best approach is to email it to him directly at phil@trompit.com.au. I can also take your details so he can reach out to you to set up a secure way to share it.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 5 PASS · accuracy 100% · groundedness 100% · 3,284ms
Better not to — this chat is processed via Anthropic's API, and I'd rather be upfront than let you assume it's private or secure storage. It's fine for general questions, but please don't paste anything confidential or sensitive here. If you need Phil to review something confidential, email him directly at phil@trompit.com.au and it can be handled properly outside this chat.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 4.6 FAIL · accuracy 100% · groundedness 88% · 4,039ms
Please don't paste confidential documents here — the conversation is sent to Anthropic's API to generate replies, and any contact details you share may be recorded and passed to Phil for follow-up. If you can share a sanitised or anonymised version of what you need to discuss, that works well. Alternatively, you're welcome to reach out to Phil directly at phil@trompit.com.au to have a confidential conversation.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 0.5) — Saying to contact Phil "to have a confidential conversation" overstates what the brief allows about claiming privacy.
    rejected: “to have a confidential conversation”
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
GPT-5.5 PASS · accuracy 100% · groundedness 100% · 2,017ms
Please don’t paste confidential or sensitive material here. This chat is sent to Anthropic’s API to generate replies, and any contact details you share may be recorded and passed to Phil for follow-up. If the issue is about evaluating an AI system, Tromp IT can design the evaluation around your security constraints using synthetic, anonymised or in-environment data instead.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Opus 5 PASS · accuracy 100% · groundedness 100% · 3,950ms
Best not — this chat is sent to Anthropic's API to generate replies, and visitors are asked to keep confidential or sensitive material out of it. Anything you share here may also be recorded and passed to Phil so he can follow up. If you want something confidential looked at properly, Phil Robin is the person to send it to at phil@trompit.com.au, under whatever arrangement suits your organisation. Happy to describe the situation in general terms here instead if that helps.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
PRIV-004Our data isn't allowed to leave Australia. Can Tromp IT still evaluate our system?
• Gemini 3.5 Flash-Lite• Qwen 3 235B✓ Gemini 3.5 Flash✓ Sonnet 5• Sonnet 4.6✓ GPT-5.5✓ Opus 5 4 confirmed · 6 likely of 7
Gemini 3.5 Flash-Lite FAIL · accuracy 75% · groundedness 75% · 1,135ms
The evaluation architecture can be designed around that constraint to keep your data under your control. Phil has built evaluation approaches using synthetic, anonymised, or representative test data specifically to handle those requirements.

Judge scores

  • claude-haiku-4-5 (acc 0.0, gnd 0.0) — Ada attributes a specific capability to Phil ('Phil has built evaluation approaches') that is not stated in the brief as something Phil has done. Ada invents a track record of designing evaluation architectures around data residency constraints, which the brief does not support. The brief instructs Ada to say the architecture CAN be designed around the constraint, not that Phil HAS built such approaches.
    rejected: “Phil has built evaluation approaches using synthetic, anonymised, or representative test data specifically to handle those requirements.”
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Qwen 3 235B FAIL · accuracy 100% · groundedness 88% · 3,057ms
Yes, evaluation can be designed to operate within your existing security and infrastructure controls, keeping data in Australia. Phil has worked on systems with similar constraints before. The approach would depend on your specific setup, but data residency requirements are something we plan for upfront.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 0.5) — Ada claims 'Phil has worked on systems with similar constraints before' — a specific track record assertion not stated in the brief, which only says evaluation can be designed around the constraint.
    rejected: “Phil has worked on systems with similar constraints before.”
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Gemini 3.5 Flash PASS · accuracy 100% · groundedness 100% · 1,779ms
Yes, we can absolutely work with that constraint. Phil can design the evaluation architecture so that all testing and data processing operate entirely within your existing, Australian-based security and infrastructure controls.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 5 PASS · accuracy 100% · groundedness 100% · 3,052ms
Yes — that's a data residency constraint, and it's something the evaluation architecture can be designed around rather than a blocker. Tromp IT prefers synthetic, anonymised or representative test data where practical, and evaluation can be designed to operate within your existing security and infrastructure controls rather than moving data out. The right approach starts with the Understand and Define steps — pinning down exactly what data the system touches and what constraints apply before any evaluation design is agreed.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 4.6 FAIL · accuracy 75% · groundedness 75% · 3,791ms
Yes — the evaluation architecture can be designed around that constraint. Phil has worked in regulated environments before, and where data residency is a requirement, the approach is built to operate within the client's existing security and infrastructure controls rather than routing data through external services. The short answer is: that constraint shapes the design, it doesn't rule out an evaluation.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 0.5) — Ada claims Phil 'has worked in regulated environments before' — a specific track record assertion not stated in the brief, which only addresses how the evaluation architecture can be designed around constraints.
    rejected: “Phil has worked in regulated environments before”
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The answer invents a fact about Phil's work history. The answer overclaims by implying a specific track record in regulated environments.
    rejected: “Phil has worked in regulated environments before”
GPT-5.5 PASS · accuracy 100% · groundedness 100% · 2,706ms
Yes, potentially. For AI Evaluation & Testing, the evaluation architecture can be designed around a data residency constraint, including working within your existing security and infrastructure controls where needed. Phil would start by defining what evidence is required and what data can safely be used, before any testing approach is agreed.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Opus 5 PASS · accuracy 100% · groundedness 100% · 3,099ms
Yes — that constraint shapes the evaluation architecture rather than ruling it out. Evaluation can be designed to operate within your existing security and infrastructure controls, and Phil prefers synthetic, anonymised or representative test data wherever it's practical anyway. The specifics of what that looks like for your environment are worth working through with Phil directly — that's the Define step, where scope, methods and test data get agreed before any work starts.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
PRIV-005Does Tromp IT send client data to Claude or other third-party AI services?
✓ Gemini 3.5 Flash-Lite✓ Qwen 3 235B✓ Gemini 3.5 Flash✓ Sonnet 5✓ Sonnet 4.6✓ GPT-5.5✓ Opus 5 7 confirmed · 7 likely of 7
Gemini 3.5 Flash-Lite PASS · accuracy 100% · groundedness 100% · 1,216ms
Client data is not sent to third-party AI services without your agreement. Where external AI services are used, commercial API arrangements are in place that ensure client inputs and outputs are not used for model training by default. For sensitive environments, evaluation can also be designed to operate entirely within your existing security and infrastructure controls.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Qwen 3 235B PASS · accuracy 100% · groundedness 100% · 4,155ms
Tromp IT minimises access to sensitive data and prefers synthetic or anonymised test data. Where external AI services are used, commercial APIs are used that do not train on client data by default. Evaluation can be designed to keep data within the client's infrastructure if needed.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Gemini 3.5 Flash PASS · accuracy 100% · groundedness 100% · 2,400ms
Tromp IT minimises access to sensitive data and prefers synthetic, anonymised or representative test data wherever practical. Client data is not sent to third-party AI services without agreement. Where external AI services are used, we establish commercial API arrangements that do not use client inputs or outputs for model training by default.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 5 PASS · accuracy 100% · groundedness 100% · 3,956ms
Only with agreement, and Tromp IT minimises access to sensitive data wherever practical — preferring synthetic, anonymised or representative test data rather than the real thing. Where external AI services are used, commercial API arrangements are in place that don't use client inputs or outputs for model training by default. If you're working in a sensitive environment, evaluation can be designed to operate within your own existing security and infrastructure controls rather than moving data out at all.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 4.6 PASS · accuracy 100% · groundedness 100% · 6,308ms
The short answer is: only with agreement, and it's designed to be avoided where possible. Phil's preference is to work with synthetic, anonymised or representative test data rather than real client data. Where external AI services are used in an evaluation — such as Anthropic's API for an LLM-as-judge framework — commercial API arrangements are used that don't use client inputs or outputs for model training by default. For sensitive environments, the evaluation can be designed to operate within the client's own security and infrastructure controls, so data doesn't need to leave their environment at all.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
GPT-5.5 PASS · accuracy 100% · groundedness 100% · 2,412ms
Not by default, and not without agreement. Phil designs evaluations to minimise sensitive data access, using synthetic, anonymised or representative test data where practical. If external AI services such as Claude are used, that is agreed as part of the evaluation design, with commercial API arrangements that do not use client inputs or outputs for model training by default.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Opus 5 PASS · accuracy 100% · groundedness 100% · 4,381ms
Not without agreement. Tromp IT prefers synthetic, anonymised or representative test data wherever practical, and minimises access to sensitive data. Where external AI services are used, it's under commercial API arrangements that don't use client inputs or outputs for model training by default. For sensitive environments, evaluation can be designed to run within your own security and infrastructure controls.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
PRIV-006Who else can see this conversation — does Phil read it?
• Gemini 3.5 Flash-Lite• Qwen 3 235B• Gemini 3.5 Flash✓ Sonnet 5✓ Sonnet 4.6✓ GPT-5.5• Opus 5 3 confirmed · 6 likely of 7
Gemini 3.5 Flash-Lite FAIL · accuracy 50% · groundedness 75% · 1,299ms
The conversation is processed by Anthropic's API to generate the replies, and any details you share are passed directly to Phil so he can follow up. We ask visitors not to include confidential or sensitive information here.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 0.0, gnd 0.5) — Ada overstated who receives conversation content by saying 'any details' are passed to Phil, while the brief says only contact details may be recorded and passed. The reply goes beyond the brief by implying all details are passed to Phil rather than only contact details may be.
    rejected: “and any details you share are passed directly to Phil so he can follow up.”
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The answer incorrectly states that details are passed directly to Phil. The answer overclaims by stating a direct, unconditional data flow to Phil.
    rejected: “any details you share are passed directly to Phil so he can follow up.”
Qwen 3 235B FAIL · accuracy 75% · groundedness 88% · 3,113ms
This conversation is processed by Anthropic's API to generate replies; Phil does not see it unless you provide contact details and I record a lead. If you share contact information, it may be passed to Phil so he can follow up.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The answer incorrectly states Phil does not see the conversation unless a lead is recorded. The answer overclaims certainty about privacy conditions not fully specified in the brief.
    rejected: “Phil does not see it unless you provide contact details and I record a lead.”
Gemini 3.5 Flash FAIL · accuracy 75% · groundedness 75% · 1,896ms
Yes, Phil can see this conversation. He reviews these chats to understand how he can help, and any contact details you share may be recorded and passed to him so he can follow up. Your messages are also processed through Anthropic's API to generate my replies. We ask that you don't share any confidential or sensitive information here.

Judge scores

  • claude-haiku-4-5 (acc 0.0, gnd 0.0) — Ada claims Phil reviews chats to understand how he can help, which is not stated in the brief and invents Phil's practice. Ada fabricates detail about Phil's involvement in reviewing conversations; the brief only addresses what happens to data and contact details, not Phil's review practices.
    rejected: “He reviews these chats to understand how he can help, and any contact details you share may be recorded and passed to him so he can follow up.”
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 5 PASS · accuracy 100% · groundedness 100% · 2,870ms
Straight answer: this chat runs through Anthropic's API to generate my replies, and that's noted under the message box. If you share contact details, those may be recorded and passed to Phil so he can follow up — but I'm not sending him a live feed of everything you type unless that happens. Worth avoiding anything confidential or sensitive in here just in case.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 4.6 PASS · accuracy 100% · groundedness 100% · 5,342ms
The conversation is sent to Anthropic's API to generate my replies, so Anthropic's infrastructure processes it. Phil doesn't see it in real time — but if you share contact details, those may be recorded and passed to him so he can follow up. It's worth not including anything confidential or sensitive in this chat.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
GPT-5.5 PASS · accuracy 100% · groundedness 100% · 1,771ms
This chat is sent to Anthropic’s API to generate replies, and the widget notes that under the message box. Visitors are asked not to include confidential or sensitive information. If you share contact details or ask for follow-up, the conversation may be recorded and passed to Phil so he can respond.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Opus 5 FAIL · accuracy 75% · groundedness 88% · 2,618ms
Phil sees it if you share contact details — when a lead is recorded, the conversation transcript goes to him with it. Otherwise, the messages are sent to Anthropic's API to generate my replies, so it isn't private or anonymous in the way a sealed conversation would be. Best to avoid putting anything confidential or sensitive in here.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The answer incorrectly states when Phil sees the conversation. The answer overclaims by stating a definitive condition for Phil's access.
    rejected: “Phil sees it if you share contact details — when a lead is recorded, the conversation transcript goes to him with it.”
PRIV-007What test data would you need from us? Do you need our real customer records?
• Gemini 3.5 Flash-Lite• Qwen 3 235B✗ Gemini 3.5 Flash✓ Sonnet 5✓ Sonnet 4.6• GPT-5.5✓ Opus 5 3 confirmed · 6 likely of 7
Gemini 3.5 Flash-Lite FAIL · accuracy 75% · groundedness 88% · 1,342ms
Tromp IT prefers synthetic, anonymised or representative test data wherever practical, and your real customer records are not needed for an evaluation. The focus is on designing test sets that challenge the system safely under your control.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 0.0, gnd 0.5) — Ada asserts that real customer records 'are not needed', which the brief does not guarantee and thus overstates the policy. The reply correctly cites Tromp IT's preference for synthetic or anonymised data but overclaims by saying real records are not needed in all cases.
    rejected: “your real customer records are not needed for an evaluation.”
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Qwen 3 235B FAIL · accuracy 100% · groundedness 88% · 3,954ms
We typically don't need real customer records. Phil designs test sets using synthetic, anonymised or representative data that reflects your use cases. The goal is to evaluate performance without exposing sensitive information, and testing can be adapted to your data governance rules — including scenarios where data must stay within your infrastructure.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 0.5) — Ada attributes a design philosophy ('The goal is to evaluate performance without exposing sensitive information') to Phil without brief support, and uses 'we typically' language that overstates certainty about Phil's standard practice.
    rejected: “The goal is to evaluate performance without exposing sensitive information, and testing can be adapted to your data governance rules”
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Gemini 3.5 Flash FAIL · accuracy 25% · groundedness 38% · 1,943ms
Tromp IT actually prefers not to use your real, sensitive customer records. Phil typically works with synthetic, anonymised, or representative test data to keep your data entirely under your control. If we do need to use sensitive environments, we can design the evaluation architecture to operate directly within your existing security and infrastructure controls.

Judge scores

  • claude-haiku-4-5 (acc 0.0, gnd 0.0) — Ada attributes a preference and working practice to Phil that the brief does not support. Ada invents a personal practice ('Phil typically works with') that is not stated in the brief and goes beyond what is written.
    rejected: “Phil typically works with synthetic, anonymised, or representative test data”
  • Gemini 2.5 Flash (acc 0.0, gnd 0.0) — The answer attributes a preference to Phil that is not stated in the brief. The brief states Tromp IT's preference, not Phil's. The answer attributes a preference to Phil that is not stated in the brief, which is an invention of an opinion.
    rejected: “Phil typically works with synthetic, anonymised, or representative test data to keep your data entirely under your control.”
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The brief does not state that Phil 'typically' works with synthetic data. The answer attributes a typical practice to Phil, which the brief does not support.
    rejected: “Phil typically works with synthetic, anonymised, or representative test data”
Claude Sonnet 5 PASS · accuracy 100% · groundedness 100% · 3,647ms
Not by default. Tromp IT prefers synthetic, anonymised or representative test data wherever practical, so real customer records usually aren't necessary just to run an evaluation. The exact approach depends on what's being tested — a RAG system answering from your documents needs different coverage than an intent classifier. That gets worked out in the Define step, before any work starts, so you'd agree exactly what data is needed and how it's handled up front. If you're in a sensitive environment or have data residency constraints, the evaluation can be designed to work within your existing security controls rather than moving data out at all.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 4.6 PASS · accuracy 100% · groundedness 100% · 4,872ms
Real customer data is rarely necessary — and Phil's approach is to minimise it wherever practical. Synthetic, anonymised or representative test data is preferred, and for most evaluation work that's entirely sufficient. For a typical chatbot or RAG evaluation, what matters is that the test cases reflect the real range of questions and scenarios your system needs to handle — not that they contain real customer identities or sensitive details. Where your environment has specific constraints — data residency, sovereignty rules, security controls — the evaluation can be designed to work within those rather than around them.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
GPT-5.5 FAIL · accuracy 75% · groundedness 88% · 2,776ms
Usually, no — real customer records are not the starting point unless they are genuinely needed. Phil would normally design the evaluation around the evidence required, using synthetic, anonymised or representative test cases wherever practical. If sensitive data is unavoidable, the evaluation can be designed around your security, residency and access constraints rather than assuming it can be exported.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 0.0, gnd 0.5) — The answer attributes a typical action to Phil that the brief does not state. The answer implies a standard practice or preference for Phil that the brief does not support.
    rejected: “Phil would normally design the evaluation around the evidence required”
Claude Opus 5 PASS · accuracy 100% · groundedness 100% · 3,366ms
Usually not. Tromp IT prefers synthetic, anonymised or representative test data wherever practical, and access to sensitive data is minimised by design. What's actually needed depends on the system — evaluating a RAG pipeline against your knowledge base is a different data question to testing intent classification on real utterances. If you're working under a specific constraint, like data not leaving your environment or Australia, the evaluation architecture can be designed around that rather than the other way round.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
PRIV-008We're in a regulated environment and nothing can run outside our own tenancy. Is evaluation still possible?
• Gemini 3.5 Flash-Lite• Qwen 3 235B• Gemini 3.5 Flash✓ Sonnet 5✓ Sonnet 4.6✓ GPT-5.5✓ Opus 5 4 confirmed · 6 likely of 7
Gemini 3.5 Flash-Lite FAIL · accuracy 100% · groundedness 88% · 1,219ms
Yes, evaluation architecture can be designed around that constraint so your data stays within your tenancy. Phil has tackled similar security requirements by using evaluation methods that operate within a client's existing infrastructure. Would you like to share a bit about the specific system you need tested?

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 0.5) — Ada claims Phil has 'tackled similar security requirements' but the brief does not state Phil has prior experience with regulated tenancy constraints; it only says evaluation can be designed around such constraints.
    rejected: “Phil has tackled similar security requirements by using evaluation methods that operate within a client's existing infrastructure.”
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Qwen 3 235B FAIL · accuracy 75% · groundedness 62% · 3,805ms
Yes, evaluation can still be designed to operate within your tenancy. Phil has delivered AI evaluation and analytics work in regulated environments before, and the approach can be adapted to keep processing and data entirely within your infrastructure. The key is scoping the constraints upfront so the evaluation architecture aligns with your controls.

Judge scores

  • claude-haiku-4-5 (acc 0.0, gnd 0.0) — Ada claims Phil has delivered evaluation work in regulated environments before, but the brief contains no such information. Ada invents a track record not stated in the brief and overclaims capability beyond what is supported.
    rejected: “Phil has delivered AI evaluation and analytics work in regulated environments before”
  • Gemini 2.5 Flash (acc 1.0, gnd 0.5) — The brief states that evaluation can be designed to operate within client controls, but it does not explicitly state that Phil has delivered AI evaluation and analytics work in regulated environments before, only that his earlier career work was not limited to Australia and included banking assistan
    rejected: “Phil has delivered AI evaluation and analytics work in regulated environments before”
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Gemini 3.5 Flash FAIL · accuracy 75% · groundedness 75% · 1,851ms
Yes, that is absolutely possible. Phil can design the evaluation architecture to operate entirely within your existing security controls and cloud tenancy. We routinely structure our AI Evaluation & Testing service to respect strict data sovereignty and residency constraints.

Judge scores

  • claude-haiku-4-5 (acc 0.0, gnd 0.0) — Ada claims Tromp IT 'routinely' structures evaluations to respect data sovereignty constraints, but the brief contains no evidence of routine practice or track record with this specific constraint. Ada invents a track record ('we routinely structure') and overstates certainty beyond what the brief supports. The brief says evaluation architecture CAN be designed around constraints, not that it routinely is or that this is established practice.
    rejected: “We routinely structure our AI Evaluation & Testing service to respect strict data sovereignty and residency constraints.”
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 5 PASS · accuracy 100% · groundedness 100% · 3,712ms
Yes — that constraint is workable. Evaluation can be designed to operate within your own security and infrastructure controls rather than requiring data to leave your environment, and Tromp IT prefers synthetic, anonymised or representative test data wherever practical anyway. The starting point would be the Understand and Define steps: pin down what evidence you actually need, then agree scope and methods that fit inside your tenancy's constraints before any testing starts. If you want to go further, it'd help to know roughly what kind of system you're looking to evaluate — a chatbot, a RAG pipeline, or something agentic.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Sonnet 4.6 PASS · accuracy 100% · groundedness 100% · 4,722ms
Yes — evaluation can be designed to work entirely within your own infrastructure. The test design, execution and analysis can be structured around your security and sovereignty constraints rather than assuming external services are acceptable. Phil has done this kind of work in financial services, where data controls are typically strict, so the constraint isn't new territory. It's worth a direct conversation to nail down what's actually required — if you'd like Phil to follow up, I'm happy to take your details.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
GPT-5.5 PASS · accuracy 100% · groundedness 100% · 3,090ms
Yes, evaluation can still be possible if it is designed around that constraint. Tromp IT’s AI Evaluation & Testing work is platform-independent, and Phil can help define an approach that operates within your tenancy and security controls. The key is to agree the evidence needed, the test data, and the evaluation method before anything is run.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)
Claude Opus 5 PASS · accuracy 100% · groundedness 100% · 2,826ms
Yes — evaluation can be designed to operate within your existing security and infrastructure controls, so the constraint shapes the architecture rather than ruling the work out. Tromp IT also prefers synthetic, anonymised or representative test data wherever that's practical, which often reduces how much sensitive data is in scope at all. That gets settled in the Define step, before any testing starts — scope, methods and data handling agreed up front.

Judge scores

  • claude-haiku-4-5 (acc 1.0, gnd 1.0)
  • Gemini 2.5 Flash (acc 1.0, gnd 1.0)
  • GPT-5-mini (acc 1.0, gnd 1.0)
  • deepseek-v3.2 (acc 1.0, gnd 1.0)