Privacy
Privacy Policy
Effective date: May 25, 2026
This page is starter product copy for launch preparation and should be reviewed by counsel before production use.
Information we collect
We collect account details, organization and membership data, vendor records, questionnaire responses, assessment evidence, audit logs, and technical information needed to operate and secure the service.
How we use information
We use information to provide the Third Party Governance workspace, authenticate users, process vendor assessments, generate reports, send transactional notifications, protect the service, and comply with legal obligations.
Evidence and customer content
Files and assessment content are processed on behalf of the customer. Access is scoped by organization, authenticated role, or invite token, and files are served through time-limited signed links.
Service providers
We may use infrastructure, authentication, storage, email, analytics, and security providers to operate the service. These providers process data only as needed to deliver their services.
Retention
We retain customer content and audit records according to organization settings, contractual requirements, and operational needs, unless deletion is required sooner by law or agreement.
Contact
For privacy requests or questions, contact [email protected].