Foundational principles
Data minimisation
We collect only the information needed to run your gap analysis and meet legal duties.
Secure by design
Portal access and uploads are protected with HTTPS (TLS) and hardened infrastructure.
Retention controls
Delete your files anytime via the customer portal after delivery. We automatically remove abandoned uploads.
Our controls in detail
1. Secure in transit and at rest
- TLS encryption protects your data while uploading or downloading.
- AES-256 encryption secures files and derived text at rest.
- Signed URLs, key rotation and least-privilege roles restrict storage access.
2. Minimal data, clear purpose
- We process your files solely to generate the gap analysis report.
- No selling or marketing use of your data.
- We avoid collecting unnecessary metadata.
3. Trusted technology providers
- Google Cloud — secure storage and compute in the UK and Netherlands.
- Docupandas — advanced OCR for tables, diagrams and images.
- OpenAI — generative AI analysis to interpret evidence.
Providers operate as contracted data processors, used strictly for the purposes described.
4. Access and ownership
- You retain ownership of your documents and reports.
- Only automated engines process files; our team does not view content unless you request support.
- Authentication, authorisation and audit logs govern access.
5. Retention and deletion
- Uploaded files for completed orders are deleted automatically after 365 days.
- Abandoned or incomplete orders are deleted within 24 hours.
- You can request permanent deletion of your data at any time.
6. Accountability
- We log key events for traceability.
- Controls are reviewed regularly against industry best practice.
- Contact privacy@standard-v.com for questions or deletion requests.
Need the legal details?
Our Privacy Policy and Terms of Service include full definitions and contractual commitments.