Privacy Policy
Last Updated: October 2026
1. Introduction
GRC LABS is committed to protecting the privacy of our clients. This policy explains how we collect, use, and safeguard your personal and organizational information when you use our platform and AI SaaS tools.
2. AI Data Processing
Our platform utilizes generative AI technologies (such as Google Gemini API) to analyze your inputs and generate governance and risk reports. By using these tools, you consent to the transmission of your inputted data to secure third-party servers for processing. We strictly do not share Sensitive Personal Information (PII) for the purpose of training public AI models.
3. Consulting Sessions & Recording
We use the Zoom API to schedule and manage consulting sessions. Sessions may be recorded (audio/video) for quality assurance and smart analysis to generate diagnostic reports. All recordings and minutes are stored in our encrypted databases and are never sold or shared externally.
4. Information Security
We implement strict security measures and advanced encryption (AES-256) to protect your data, AI Tokens balance, and corporate reports. While no internet transmission is 100% secure, we adhere to industry best practices to ensure your information's safety.