Privacy Policy

Last updated: February 2026

Who we are

Serious Platform is operated by ISO Serious. We provide an ISO 27001 compliance automation tool for organisations undertaking information security management.

What data we collect

• Client workshop data you enter (organisation details, assets, risks, suppliers)
• Notion OAuth tokens when you connect your workspace
• Account credentials (email address and password)

How we use your data

• Workshop data is processed by AI to generate compliance registers
• Notion tokens are used solely to export registers to your workspace
• We do not use your data to train AI models

Storage and security

All data is encrypted in transit (TLS) and at rest. Data is stored in a PostgreSQL database hosted within the EU. We do not share your data with third parties except where required to provide the service (AI processing via Anthropic's Claude API).

Data retention

Your data is retained for the duration of your account. You may request deletion of your data at any time by contacting us.

Contact

For privacy-related enquiries, contact ISO Serious at privacy@isoserious.com.

← Back to homepage