Skip to content
⚖️ ATTORNEY REVIEW PENDING — This document is a working draft. It has not yet been reviewed or approved by counsel and should not be relied upon. The banner will be removed once review is complete.

Security Practices

Effective date: September 1, 2026 · Last updated: September 9, 2026

1. Data Handling in Self-Assessments

Data submitted through the Audmit self-assessment tool is stored temporarily in DynamoDB with a 90-day Time To Live (TTL), after which it is automatically deleted. Session data is stored locally in your browser's sessionStorage and is cleared when the tab is closed.

Please note: Audmit provides technology and compliance-consulting services. We are not a law firm and do not provide legal advice.

2. What We Store

When you use our services, we may store the following information to facilitate proposal generation and communication:

  • Email address
  • Company name
  • Selected AI systems
  • Assessment results

3. What We Do Not Store

We intentionally limit the data we collect. We never store:

  • Passwords
  • Financial information
  • Social Security Numbers (SSNs) or similar identification numbers

4. Demo Environment

The demo environment available at demo.audmit.com does not store any data on our servers. All inputs and interactions are handled strictly client-side within your browser, and all data is lost upon refreshing the page.

5. Encryption and Access Controls

We employ robust security measures to protect your information:

  • Encryption in Transit: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS 1.2 or higher.
  • Encryption at Rest: Data stored in our database is encrypted at rest using AWS managed keys for DynamoDB.
  • Access Controls: We implement least-privilege Identity and Access Management (IAM) policies. There is no public access to our database.

6. Third-Party Services

We utilize trusted third-party providers, including AWS for hosting and database services, and a dedicated email delivery service. All third-party providers operate under strict contractual data processing agreements to ensure your data is handled securely.

We do not sell or share your security-related data with any unauthorized third parties.

7. Incident Response

If you have any security concerns or wish to report a vulnerability, please contact us immediately at security@audmit.com or info@audmit.com. We take all reports seriously and will investigate promptly.