Security and data statement
We work only from public information. We never ask for access to your systems.
Our controls are aligned with the principles of ISO/IEC 27001. Competidar is not certified to ISO/IEC 27001.
1. Scope
This statement covers how Competidar researches companies, builds products and handles the small amount of client information we hold. It follows the main control themes of ISO/IEC 27001:2022: organisational, people, physical and technological.
2. What information we handle
- Public information about companies: websites and the documents on them, published reports, review sites, news, public company pages on LinkedIn, and public forums.
- Client contact and order details: business email address, company name, what was ordered and when.
- We do not collect information about private individuals, we do not use leaked, hacked or paid-for private data, and we do not ask clients for confidential material.
3. Organisational controls
- One named owner is responsible for information security.
- Information is classified as public, client or internal, and handled accordingly.
- Suppliers are limited to established providers for email, AI-assisted research and production, file hosting and payment. Card details are handled only by the payment provider and never reach us.
- Client records are kept for as long as needed to deliver and support an order, then removed. You can ask us to delete yours at any time.
4. People controls
- Access to client information is limited to the people who need it to deliver the order.
- Anyone working with Competidar agrees to confidentiality.
5. Physical controls
- Competidar is fully remote and has no office or servers of its own. Work devices are locked when unattended and use disk encryption.
6. Technological controls
- Business accounts use strong, unique passwords and two-step verification.
- Previews are shared by private link. A preview contains only preview content, so the full product cannot be taken from it.
- Devices and software are kept up to date.
- Finished products are self-contained files with no tracking and no third-party analytics.
7. Incidents
If we become aware of unauthorised access to client information, we will tell the affected clients without undue delay, and within 72 hours where we can, with what happened and what we have done.
8. Your requests
To see, correct or delete the information we hold about you, or to stop receiving emails, write to info@competidar-ai.com.
9. Review
This statement is reviewed at least once a year and after any incident.