Privacy & Data Governance Policy

1. Purpose & Scope

ComplDoc (“the practice”, “we”, “us”) provides technical writing, gap analysis, and document formation consulting services. Because we draft technical files for high-risk artificial intelligence systems, aviation operating procedures, and government tenders, client data confidentiality and security are central to our operational principles.

This policy outlines how we collect, store, and process client information and technical assets. We do not store personal data beyond what is voluntarily submitted for inquiries, consultations, or direct engagement operations.

2. Handling of Sensitive Technical Documentation

Documentation drafted for the EU AI Act (Annex IV), NIS2, SOC 2, and aviation regulatory approval contains proprietary details of client systems, architectures, and operations. All technical materials are handled under the following strict criteria:

• Isolation: Client architectural schematics, code descriptions, and data flow charts are stored in isolated encrypted directories.
• Zero Third-Party Training: We do not upload client technical files, prompt parameters, or documentation drafts to public LLMs or machine learning systems.
• Destruction Schedule: Unless a Compliance Maintenance Plan is active, client documentation assets are purged from our working directories 90 days after delivery.

3. Information Collected via the Public Site

For visitors to the public marketing site, we collect minimal information:

• Inquiry Details: Name, company name, email address, and system specifications provided through our contact form.
• Analytics: Minimal, privacy-compliant analytics tracking to measure page loading speeds and overall resource efficiency. We do not use cross-site tracker IDs.