Privacy Policy

1. Information We Collect

We collect information you provide directly to us when creating an account, uploading evidence documents (`.pdf`, `.docx`, `.xlsx`), or executing security questionnaire response workflows.

• Account Data: Full name, work email address, hashed credentials, organization details.
• Tenant Content: Uploaded security policies, SOC 2 reports, questionnaire spreadsheets, standard answer snippets.
• Usage & Telemetry: Sanitized audit log events, performance metrics, API transaction counts.

2. How We Use Information

We process customer content exclusively to provide, maintain, and support the Acumen Trust response engine:

• Generating grounded security questionnaire answers backed by document citations.
• Calculating evidence readiness scores across compliance frameworks (SOC2, ISO 27001, GDPR).
• Processing lossless `.xlsx` response exports.
• Managing account authentication and billing subscriptions via Stripe.

3. Data Sharing & Subprocessors

We do not sell, rent, or trade customer data. We share data only with infrastructure sub-processors necessary to run the platform (e.g., Cloudflare R2, Google Cloud, Stripe).

4. GDPR & CCPA Rights

You have the right to inspect, export, correct, or request the deletion of your account and organization evidence data at any time by contacting [email protected].