Privacy & data handling
How IT Audit Factory handles information submitted through this website, the beta program and Support.
Last updated: 1 October 2026
Who to contact
This notice covers the IT Audit Factory website and beta administration. For questions about your application or personal information, email Sales@ITAuditFactory.com. For information included in a technical support request, contact Support@ITAuditFactory.com.
Information you provide
The beta form asks for your first and last name, company, job title, company email, requested edition or editions, and optional testing notes. Beta administration also records email verification, application decisions, signed-agreement receipt, communications and, where needed, Installation IDs and license-key records. Information you email to Sales or Support is handled with that correspondence.
How the information is used
We use these records to verify your email, review eligibility, communicate decisions, provide installation instructions, manage beta agreements and licenses, respond to questions and investigate misuse. Verifying an address confirms access to that mailbox; company affiliation and authority to participate still require review.
Cookies, network information and logs
The beta and administration workflows use session cookies to maintain form and sign-in security. The beta application uses a keyed, non-readable representation of the public IP address to enforce duplicate and abuse limits; the company email domain is also recorded. This does not mean all network information is anonymous: the hosting provider may record raw IP addresses and request details in web, security and delivery logs.
Website hosting and email services process requests and messages as part of running the site. The application form is not a place to submit client audit evidence, passwords, API keys or other secrets.
Storage, access and service providers
Beta records are stored separately from publicly served website files. Sensitive application fields, license-key records and queued message contents are encrypted by the beta system. The website hosting and email providers process the data needed to host the site and deliver messages. Authorized Sales and Support staff use the information for the purposes described above.
Email messages and attachments are also retained by the mail systems involved in delivery. Encryption of website records does not make email end-to-end encrypted or eliminate every security risk. Share only the information needed for your request.
Expiry, removal and retained history
Unverified beta requests expire after the verification window, currently 24 hours. Expiry is not a promise that all related records are erased at that time. Removing an applicant from the active program releases eligible domain/IP reservations but retains agreement, licensing and administrative history. Previously issued keys still require a separate resolution.
Retention depends on the record’s purpose, active licensing, Support work and applicable obligations or holds. Contact Sales to ask about access, correction or deletion of your information. We may need to verify your identity and review which records can be removed; deletion of every record is not automatic.
Assessment data and Support
Assessment evidence is managed in the product deployment selected by the customer: local storage for stand-alone editions, or the customer-controlled MSP server for shared operations. Signing up for the beta does not upload assessment evidence. In-product support workflows prepare sanitized information for you to review before sharing. When emailing Support, remove unnecessary client data, credentials, private keys and unrelated evidence.
Changes to this notice
The date above identifies the latest revision of this notice. Questions about a change or about the handling of a particular record can be sent to Sales.
Installer access records
Approved beta downloads use private, expiring invitation links. We record the approved request, package, access expiry and download-start events to control delivery and investigate misuse. Installer files are held in private encrypted storage. Download links do not replace your beta agreement or product license.