Privacy Policy
Last updated: August 14, 2026
Overview
This policy explains what information Alloy GRC's website collects, why, and what choices you have. It covers this marketing site, the pages describing Alloy GRC, ATIP, AREA, and framework coverage, not the security posture of Alloy GRC as a deployed product, which is governed separately for each customer environment. This is a general policy, informational rather than legal advice specific to your situation.
Data We Collect
Information you provide
When you submit the demo request form, we collect your name, work email, organization, role, framework(s) of interest, and any message you include. We use this to respond to your request and, if you become a customer, to set up and support your account.
Information collected automatically
Standard web server logs (IP address, browser type, pages visited, timestamps) are recorded for security and troubleshooting. Optional analytics cookies, described below, are only set if you accept them.
Data retention
We keep demo request submissions as long as needed to respond to your inquiry and, if you become a customer, for the duration of the relationship plus a reasonable period afterward for recordkeeping. Server logs are retained on a rolling basis for a limited period and then purged.
Your rights
Depending on where you're located, you may have the right to access, correct, or delete personal data we hold about you, or to object to certain processing. To exercise any of these rights, contact us using the details below.