Logo Menu

PrivacyยทLast updated

Privacy Policy

This policy explains what information SOC2Auditors.org collects, how we use it, and when information may be shared with auditors or service providers.

Introduction

SOC2Auditors.org ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Information We Collect

Information You Provide

When you use our quote request form or contact us, we may collect:

  • Name and email address
  • Company name and size
  • Industry and compliance requirements
  • Any other information you choose to provide

Automatically Collected Information

When you visit our website, our hosting, security, and cookieless analytics systems process limited technical information, including:

  • Network address and browser type needed to serve and protect the request
  • Approximate location (country, and state or province in the US and Canada) derived from your network address when you submit a quote request, included in the anonymized request sent to auditors
  • Device information and operating system
  • Pages visited and time spent on pages
  • Referring sites and campaign parameters, without storing the page's search query or URL fragment

How We Use Your Information

We use the information we collect to:

  • Connect you with verified SOC 2 auditors
  • Respond to your inquiries and provide customer support
  • Improve our website and services
  • Send you relevant information about SOC 2 compliance, with your consent
  • Analyze website usage and trends

Information Sharing

We may share your information with:

  • SOC2Auditors.org: When you request quotes, we share your information with selected auditors to provide you with estimates.
  • Service Providers: Third-party vendors who help us operate our website and services.
  • Legal Requirements: When required by law or to protect our rights.
No sale of personal information

We do not sell your personal information to third parties.

Cookies and Tracking Technologies

We use self-hosted, cookieless analytics to understand aggregate page traffic and a limited set of named actions, such as opening a quote form or following a public directory link. Our analytics integration does not intentionally create analytics cookies or browser-storage identifiers, and we do not send form fields, names, email addresses, phone numbers, inquiry identifiers, free text, or customer identifiers to analytics.

Pageviews and those named actions are recorded by two self-hosted collectors, at analytics.100signals.com and stats.100signals.com. Neither records anything when your browser sends a Do Not Track signal. The first excludes URL fragments and any search parameters other than standard campaign (utm) tags. The second records the page path, referring site, page title, and screen width, notes when you scroll past the top of a page, and keeps only the campaign source and name from a link's search parameters (for example, utm_source and utm_campaign). Anonymous visitor and visit counts are estimates derived from technical request data; they are not persistent identities and are not joined to quote or customer records. We are working toward a 25-month online analytics retention limit, but automated deletion is not active and records may currently be retained longer. Security tools and form providers may use strictly necessary storage or cookies for their own functions. In each browser tab, your browser keeps a broad category for how you first reached the site (for example, a search engine or an AI assistant) in session storage until the tab closes. We record that category only if you submit a quote request.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Opt out of marketing communications
  • Object to processing of your personal information

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at hello@soc2auditors.org.