How NeoGRC handles personal data
Website, enquiry and account-administration data; purposes, sharing, retention and individual rights.
Read documentLegal centre
Clear terms for accountable GRC work
Each legal document has its own permanent URL, metadata and scope so procurement, privacy and security reviewers can link directly to the information they need.
The baseline terms for using NeoGRC
Service scope, professional judgement, acceptable use, customer data and the role of signed agreements.
Read documentOur current website cookie position
No non-essential cookies today, necessary infrastructure, browser controls and how future changes will be disclosed.
Read documentHow processor responsibilities are governed
Controller and processor roles, security measures, subprocessors, assistance, incident handling and deletion.
Read documentResponsible AI
AI assists analysis. People remain accountable.
NeoGRC is designed to support regulatory analysis, comparison, classification and impact discovery. Machine-generated results can be incomplete or incorrect and must not be treated as legal advice or an autonomous compliance decision.
Workflows retain source context, distinguish confidence from certainty and route material decisions to authorised people for approval, modification or rejection. Customers remain responsible for their regulatory interpretation, control design and final decisions.
Security reporting
Report a suspected vulnerability responsibly.
Send the affected location, reproduction steps and potential impact toadmin@neogrc.com. Do not access, change, download or disclose data that does not belong to you, disrupt service or use social engineering.
We will acknowledge a credible report, investigate it and coordinate remediation and disclosure where appropriate. This statement does not create a bug-bounty programme or promise payment.