Privacy & data processing

Information we collect

When you use the ALL-SOC website and self-assessment service, we may collect the following for stated purposes:

• Self-assessment questionnaire responses (no production credentials or sensitive business data)
• Contact information you provide when booking a demo (name, email, company, etc.)
• Contact, company, and partnership information submitted in a partner application
• Email address for full report unlock (OTP verification)
• Standard website analytics (pages visited, browser type, approximate location)

How we use information

We use collected information to:

• Generate Free SOC Assessment reports and personalized recommendations
• Schedule product demos and follow-up communication (with your consent only)
• Assess partner applications and send partnership communications or PDF reports
• Improve product features and user experience
• Fulfill legal compliance obligations

Data protection measures

We apply industry-standard security measures including TLS encryption in transit, access controls, automatic free-text redaction, and regular security reviews. Assessment data is stored in controlled environments and is never sold to third parties.

Data retention

Self-assessment data is retained for 12 months by default, then anonymized or deleted. Information needed for demo, partner applications, or PDF email delivery is retained only for the relevant purpose, dispute handling, or necessary obligations, then deleted or anonymized. You may request deletion through the privacy page or relevant form.

Your rights

Subject to applicable law, you may exercise rights to access, copy, correct, or delete personal information and withdraw consent, and ask about processing. Submit a request through the demo or partner form so we can verify and process it.

Contact us

To exercise rights or ask about this notice, submit your work email and request through the demo or partner page. This is the current public contact path; we will respond within a reasonable timeframe.