ISO/IEC DIS 27045.2 Draft International Standard Stage 40.60 Close of voting, 7 August 2026 Publication estimate 15 September 2027 Kit USD 799 or watch USD 49 a month
ISO 27045 Revision CheckerBig data risk, read from the draft

Privacy

What this site collects, where it is kept, and who can see it. In plain words, without a table of sub-processors you did not ask for.

What is collected

If you only read the site and run the free check, nothing is collected. The six answers stay in your browser and are not sent to a server. The page computes the result from the record on your own device.

If you buy the kit or start the watch, Stripe takes the payment and returns the email you give there. We store that email, the plan you bought and the date. We do not receive or store your card details.

Where it is kept and who can see it

Pages are served by Cloudflare. Saved work and accounts are in Supabase in Sydney (AWS ap-southeast-2), encrypted at rest and in transit. Payments are taken by Stripe. Sign-in and receipt mail go through SendGrid. Those four are the only processors. Saved work is kept until you delete it or close the account. Support opens a saved record only on your request.

Cookies and measurement

The site sets a session cookie when you sign in or buy, and nothing else. There is no advertising tracker and no third-party analytics script on the page.

Your choices

Write to support@theartofservice.com to ask what is held about you, to correct it or to delete it. A request is answered within the time the law allows.

Not legal advice

This site records a public draft and helps you prepare. It does not give legal advice, does not certify anyone and does not rule on compliance.