Privacy

Control Mapping Reader places a control statement, a clause, a finding or a questionnaire line against the held text of the standards, in your browser. The artifact you paste or photograph is read on your device: the image never leaves it, and no identification step sends anything anywhere. Nothing is stored unless you choose to save a result.

What is read, and what is kept

The text of the artifact and the held snapshot are read in your browser by a fixed set of rules. Nothing is inferred about you. If you do not save, nothing is stored at all. If you save, the artifact text you pasted, the placement it produced and the workspace you named are kept under your account, and nothing else.

Where it is kept and who can see it

Pages are served by Cloudflare. Saved work and accounts are kept in Supabase in Sydney (AWS ap-southeast-2), encrypted at rest and in transit. Payments are processed by Stripe. Sign-in and receipt mail go through SendGrid. Those four are the only processors. Saved work is kept until you delete it or close your account, and support opens a saved record only at your request.

Images and images only

A photographed or screenshotted page is read in your browser by a copy of the reader engine served from this site; the image is not uploaded. If image reading is unavailable in your browser, paste the control text instead.

Your choices

You can place a control with no account at all. A saved artifact is on the paid plans; you can delete a saved artifact, or your whole account, yourself from the account page. Contact support@theartofservice.com with any question about your data.