Privacy Policy

    Last updated: January 15, 2026

    At CABIER Consulting, we take your privacy seriously. This policy describes how we collect, use, and protect your personal information.

    Information We Collect

    Account Information: When you create an account, we collect your name, email address, organization name, and job title.

    Usage Data: We collect information about how you use our platform, including pages visited, features used, and time spent.

    Compliance Data: Data you input for assessments, reports, and compliance tracking is stored securely and remains your property.

    Technical Data: IP addresses, browser type, device information, and cookies for platform functionality.

    How We Use Your Information

    • Provide and improve our GRC platform services
    • Personalize your experience and recommendations
    • Send regulatory alerts and updates you've subscribed to
    • Process transactions and send related information
    • Respond to your comments, questions, and support requests
    • Analyze usage patterns to improve our platform
    • Comply with legal obligations

    Data Security

    We implement industry-standard security measures including:

    • AES-256 encryption for data at rest
    • TLS 1.3 encryption for data in transit
    • SOC 2 Type II certified infrastructure
    • Regular security audits and penetration testing
    • Role-based access controls
    • Multi-factor authentication

    International Transfers

    We process data in the United States and may transfer data internationally. For EU users, we comply with GDPR requirements including Standard Contractual Clauses for international transfers. Enterprise customers may request data residency in specific regions.

    Your Rights

    Depending on your jurisdiction, you may have the right to:

    • Access your personal data
    • Correct inaccurate data
    • Delete your data
    • Export your data
    • Restrict processing
    • Object to processing
    • Withdraw consent

    Data Retention

    We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we remove personal data within 30 days, except where retention is required for legal or regulatory purposes.

    Contact Us

    For privacy inquiries or to exercise your rights, contact our Data Protection Officer:

    Email: privacy@cabierconsulting.com
    Address: CABIER Consulting, Privacy Team, New York, NY 10001