Privacy

Account information you provide: name, email address, organisation and any details you include in an enquiry. Operational information generated by your use of the platform: activity, configuration changes, and the audit record of privileged actions.

Technical information necessary to operate securely: authentication events, originating network address and device information, retained as part of the security record.

To provide and operate the platform, to establish and verify identity, to maintain the auditable record that makes the service defensible, to detect and investigate security events, and to meet legal and regulatory obligations.

We do not use client activity for advertising, and we do not profile you for purposes unrelated to operating the service.

We do not sell personal data. We do not license or aggregate client activity for the benefit of other clients or third parties. We do not share your activity between clients under any circumstance.

You, and the people you grant access to. Internally, access to client data is restricted by role, bound to a purpose, and logged — including access by administrators.

Service providers that host or secure the platform process data on our instruction under contract, and only to the extent required to deliver that service.

Account and activity records are retained while your access continues, and afterwards only for the period required by law or by the retention terms in your engagement documentation.

Security records are retained for a defined period to support investigation, then removed on a schedule.

You may request a copy of the personal data we hold about you, ask us to correct it, ask us to delete it where no legal obligation requires retention, and object to processing in defined circumstances.

Requests are answered within the period required by applicable law. We will tell you plainly if we are unable to act on part of a request, and why.

Data is encrypted in transit and at rest. Access follows a least-privilege model with separated duties and an append-only audit trail. Controls are examined by independent parties on a recurring basis.

We use only what is required to keep you signed in and to keep the session secure. We do not run third-party advertising or cross-site tracking on this site.

Where data is processed outside your jurisdiction, transfers are made under recognised safeguards. Specific arrangements are confirmed during onboarding and can be reviewed by your team.

Privacy questions and rights requests can be raised through the contact form on this site or through your named oversight contact where one has been assigned.