Privacy Policy

Last Updated: August 2026

1. Information We Collect

When you use the Vendor Diligence & DORA Audit platform, we collect information necessary to perform regulatory audits and provide our services. This includes vendor metadata, architectural notes, and payment information processed securely via Stripe.

2. How We Use Your Data

The data you provide is processed strictly for the purpose of generating automated DORA and SYSC 8 compliance assessments. We utilize AI models (Google Gemini) to analyze your inputs; however, we do not train our foundational models on your proprietary vendor data.

3. Data Retention & Security

We implement institutional-grade security measures to protect your supervisory audit records. Assessment metadata is retained only as long as necessary to provide you with the generated PDF dossiers and comply with our own legal obligations.

4. Contact Us

If you have any questions about this Privacy Policy, please contact us via our Contact page.