ISO Auditor Pro · MSCS di Stefan E.

EnglishRomână

Privacy Policy

Last updated 19 September 2026

In short

ISO Auditor Pro stores everything you enter on your own device, encrypted. MSCS di Stefan E. (the developer) does not receive, collect or see your clients, audits, evidence or documents. The application has no analytics, no advertising and no account with us.

Who is responsible

MSCS di Stefan E., Italy — contact: stefan@support-remote.org.

What the app stores, and where

  • Your workspace (clients, audits, assessments, findings, evidence files, documents, users) is kept in a private folder of the app on your device, sealed with AES-256-GCM. The key is held only by the operating system's secure storage (Keychain) of that device and is never sent anywhere.
  • Backups you create are encrypted with a passphrase you choose and are saved where you choose. Nobody, including the developer, can open them without that passphrase.
  • Interface preferences (theme, language) stay on the device.

What leaves the device

  • Nothing, by default. The application blocks all network access except to servers you explicitly allow in Settings, each confirmed in a system dialog.
  • If you switch on the optional AI assistant, the text you choose to send goes to the provider you configured with your own key, and only after you see exactly what will be sent. The provider's own privacy terms apply to that transfer.
  • If you configure team synchronisation with your organisation's own server, the records you sync go to that server.

Purchases

The subscription is handled entirely by Apple through the App Store. The app receives only the state of the subscription (active or not, expiry date), which it keeps on the device to decide what it may do. Apple's privacy policy governs the purchase itself.

Personal data of third parties

As an auditor you may record personal data of your clients' staff (names, roles, e-mail addresses) in the application. You are the controller of that data; the application gives you retention rules, legal holds, an audit trail and a client data deletion workflow to meet your obligations under the GDPR.

Your rights

Because we hold no data about you, requests for access, correction or deletion concern the data on your device, which you control directly. For any question about this policy write to stefan@support-remote.org.

Changes

Changes to this policy are published on this page with a new date.