FAQ

Short, procurement-ready answers. If you need a formal response pack (DPA, security questionnaire, DPIA register), use the Contact page.

Is this legal advice?

No.

What does it produce?

Registers, maps, roadmaps, evidence outputs.

Do you collect data?

Local-first approach: processing happens client-side by default. Any data you choose to persist is stored with explicit control and export capability.

Can we self-host?

Yes, static-friendly architecture.

Which frameworks are supported?

Designed to align with major privacy requirements (e.g., GDPR, CCPA/CPRA) and privacy program structures (e.g., NIST Privacy Framework, ISO/IEC 27701).

Can teams collaborate?

Yes. Team tiers focus on shared registers, role ownership, change tracking, and repeatable reporting cadences.

Need a buyer-ready response pack?

We can provide security + privacy response artifacts aligned to your environment and contracts.