Privacy Policy

We collect the following categories of information:

• Account information — name, work email address, password credentials, role, and organization affiliation.
• Workforce and compliance data — employee records, training and acknowledgment history, incident reports, form submissions, and signatures, submitted by your organization to operate its compliance programs.
• Prospect and contact data — information you submit through demo requests or contact forms (name, company, email, phone, area of interest).
• Usage and device data — log data, IP address, browser type, pages visited, and actions taken, used for security, auditing, and service improvement.

• Provide, operate, and secure the Platform and its features;
• Authenticate users and enforce role-based, tenant-scoped access controls;
• Maintain compliance records, audit trails, and evidence integrity;
• Send service notifications such as assignments, reminders, and account emails;
• Respond to inquiries and provide customer support;
• Analyze usage to improve reliability, performance, and product features;
• Comply with legal obligations and enforce our terms.

For workforce and compliance data, we act as a service provider (processor) on behalf of your employer or organization, which controls that data. Questions about how your organization uses your data — including access, correction, or deletion of employment records — should be directed to your organization's administrator.

Some features process content with artificial intelligence (for example, extracting data from safety data sheets or generating compliance summaries). AI processing is performed to deliver the requested feature. We do not use your organization's private compliance data to train generalized public AI models.

We do not sell personal information. We share information only with:

• Your organization — administrators and authorized users within your tenant, per configured permissions;
• Service providers — infrastructure, email delivery, and AI processing vendors bound by confidentiality and data protection obligations;
• Legal authorities — when required by law, subpoena, or to protect rights, safety, and the integrity of the Platform;
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We employ safeguards including encryption in transit, tenant isolation, role-based access control, private file storage with signed access, comprehensive audit logging, and least-privilege server-side enforcement of sensitive operations. While we work to protect your information, no method of transmission or storage is completely secure.

We retain personal information for as long as needed to provide the services and to meet legal, regulatory, and audit obligations. Compliance records (e.g., signed acknowledgments and audit trails) may be retained for longer periods as required by workplace regulations or your organization's retention policies. When retention is no longer required, data is deleted or de-identified.

Depending on your location, you may have rights to:

• Access, correct, or delete personal information we hold about you;
• Object to or restrict certain processing;
• Receive a portable copy of your data;
• Withdraw consent where processing is based on consent.

For employment-related records, requests are fulfilled in coordination with your organization as the data controller. To exercise rights regarding data we control (such as website contact submissions), reach us via the Contact page.

We use strictly necessary cookies and similar technologies for authentication, session management, and security. We do not use third-party advertising cookies on the Platform.

The Platform is intended for business use by adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

Information is processed primarily in the United States. Where information is transferred across borders, we use appropriate safeguards consistent with applicable data protection laws.

We may update this Privacy Policy periodically. Material changes will be communicated through the Platform or by email, and the effective date above will be revised. Continued use after changes take effect constitutes acceptance.

For privacy questions or requests, contact us through the Contact page. See also our Terms & Conditions.