Proof, not promises.
The facts a procurement team or a CISO checks first: who we are, how we work, and what this website does with your data.
Legal identity
- Founded
- 2024
- Chief Executive
- Abdullah Qays Kamal
- Address
- 4 Streets (Arba’a Shawari), Al Yarmouk, Baghdad, Iraq
Regulatory status
Our method
- IdentifyScope, gap register and readiness scorecard
- ProtectRemediation plan, with an owner and a date for each item
- DetectTest findings and a review of logging and monitoring
- RespondIncident-response plan, playbooks and a tabletop exercise
- EvidenceEvidence pack and mock-audit report
What this website collects
Our forms are handled by our own server functions. Each request is kept once, as a private record in our own store on Cloudflare R2, under its EU jurisdiction setting.
Only the two people named for that kind of request can read it, and every access is logged. The only other way in is one logged emergency account held by our IT administrator. The agency that built this website cannot read submissions or files.
Our CRM receives your contact details and four labels we add, nothing more: never your topic, notes, files or incident details. You can ask us to keep your details off the CRM entirely.
Tender files are never attached to an email, and they are deleted 90 days after the tender is decided. The site sets no advertising cookies of its own; the exception is Microsoft’s MUID cookie, which our analytics, Microsoft Clarity, brings with it and which Microsoft also uses for advertising. Clarity records how pages are used but never sees what you type in a form or the incident number.
The full detail, form by form, is in our Privacy notice.
FAQ
Where is our data handled?
Agreed with you in writing before the engagement starts: where each deliverable is stored, in which region, who can open it, and how it is handed back or deleted when we finish.