Mark, Thanks for your interest in the Rapid Risk Assessment (RRA) methodology! We have found it to be a very useful process. RRA is ''not'' a tool in the sense of a web application, or automated service. And Mozilla does not perform RRAs for outside parties. We have shared a Google Document form as a "starting point" to assist folks who wish to perform their own Rapid Risk Assessments. When you make your own copy of that document, you will control all the data. There is no way to "submit" a filled out form to Mozilla. FYI, there is a community of non-Mozilla folks who use RRA - you can find out about them at [https://www.rra.rocks/ RRA.rocks] site. They also have versions of the template available. I can see how our use of the word "tool" can be confusing here. We'll try to reword the page to make it clearer that no data is collected. --Hal