Privacy
Privacy responsibilities are shared with the operator.
Compliance Sphere is deployed for an organization. That organization determines why workspace data is processed and should provide the privacy notice, retention schedule and contact applicable to its deployment.
Data the service may process
- Account, firm, workspace and role information.
- Assessment responses, requests, evidence, documents, findings, comments and approvals.
- Security and audit records such as sign-in activity, actor, action and timestamp.
- Files deliberately uploaded by authorized users.
Browser storage
Essential cookies maintain authenticated sessions and request protection. The interface may store display preferences and campaign parameters in your browser; it does not need to send those optional values to a third-party analytics service.
Retention and rights
Retention, access, correction, export and deletion handling are set by the operating organization and may be limited by contractual, legal or audit-record obligations. Contact that organization for a request relating to your data.