Privacy Policy

1. Who we are

Audren is a compliance management platform that helps SMEs achieve and maintain ISO 9001, 14001 and 45001 certification. This policy explains what data we collect and how we protect it.

2. Data we collect

Account information (name, email), assessment answers and evidence you upload, and basic usage analytics. We do not sell your data, ever.

3. Where it lives

Your data is stored in EU data centres, encrypted at rest, and isolated per organisation with row-level security.

4. Your rights (GDPR)

You can export, correct, or delete your data at any time from Settings → Data & privacy. Contact us at privacy@audren.app for any privacy-related request.

5. Subprocessors

We use Supabase (database, auth, storage), Stripe (billing), and Lovable Cloud (hosting). All are GDPR-compliant.

6. Changes

We’ll email you before any material changes to this policy.