Privacy Notice

Last updated 21 October 2026 · Pilot version — this wording will be replaced by solicitor-reviewed terms before general release.

Who we are

Kompliant provides compliance-document software to UK trades and facilities businesses. For the business account holder's own data we are the data controller. For the content a business enters about its own operatives, subcontractors and customers, that business is the controller and we process it on their instructions.

What we collect

Account data: your name, email, password (stored hashed), company details, logo and billing status. Payment card details are handled by Stripe and never touch our servers.

Document content: the job descriptions, sites, trades and answers you enter, and the documents generated from them.

Signing records: for each person asked to sign a document — their name, email or phone if provided, the signature image they draw, the time, the document version, and the IP address and device type used. This is collected to evidence that the document was read and acknowledged.

Usage and support: pages visited within the app, feedback you send us, and technical logs needed to run the Service.

How we use it

To provide the Service, including generating documents with an AI model; to send the emails you trigger (invitations, signing links, customer copies, "all signed" notifications); to send you service messages and, during the pilot, to ask for feedback; to bill you; and to keep the Service secure.

AI processing

Job information you enter is sent to Anthropic's Claude API to draft documents. Anthropic processes it to provide the response and does not use API data to train its models. We do not send signatures or signing records to the AI.

Where it is stored

Data is stored with Supabase in the EU (Ireland) and served through Vercel from the UK/EU. Emails are sent via Resend. Payments are processed by Stripe.

How long we keep it

Documents and signing records are kept for as long as your account is active and for six years after, reflecting typical retention expectations for health and safety records, unless you ask us to delete them sooner. Account data is deleted within 30 days of closure except where we must keep it for tax or legal reasons.

Your rights

You can access, correct, export or delete your data, and object to or restrict processing, by emailing hello@kompliant.co.uk. Operatives who have signed a document should contact the business that sent it to them; we will assist that business. You can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use only the cookies needed to keep you signed in. No advertising or third-party tracking cookies.