How Auxlo handles your data

Your data stays in your environment

During an advisory engagement, your compliance data stays where it already lives, inside your own systems and accounts. We work in the tools you already use. Your policies, risk registers, evidence files, and vendor responses remain under your control and your organization's data residency, not ours.

Auxlo does not operate as the custodian of your compliance data during advisory work. We deliver the artifacts to you, and you keep them. This means your most sensitive material does not need to sit on our infrastructure for us to do the work.

What we do receive

To scope and deliver an engagement, we receive the information you choose to share with us: the details discussed on calls, the context you provide about your business and your frameworks, and the materials you send us for review. We treat all of it as confidential. We use it only to deliver the work you have engaged us for, and we do not sell it, share it for marketing, or use it for any purpose outside your engagement.

The free assessment generates your readiness snapshot from the answers you provide. It does not require an account, and you are not asked for sensitive client data to complete it.

Confidentiality

Every engagement is covered by confidentiality. The practitioners who work on your account are bound to keep what they see private. Where you need it, we are glad to sign a mutual non-disclosure agreement before any material changes hands.

Canadian data residency, when you need hosting

Some clients need a managed workspace where compliance artifacts, evidence, and a live readiness view are hosted for them rather than kept in their own tools. For those engagements, Canadian data residency is available: the managed workspace can be configured so that client data is stored at rest in Canada. If your procurement or legal team requires hosting in a specific jurisdiction, tell us during scoping and we will confirm the arrangement in writing before any data is stored.

When AI is used to help draft compliance artifacts, every draft is reviewed and signed off by a credentialed practitioner before you rely on it, and we will tell you plainly which tools are involved and how your information is handled in that step.

What we are, and what we are not

We prepare you to pass. The independent auditor or certification body issues the report or certificate. Auxlo provides decision-support and compliance services. Auxlo does not provide legal advice. Regulatory information is current as of the date above and should be verified with qualified legal counsel.

Questions

If you have a question about how your data is handled, or you need specific terms in writing for your own compliance review, contact us at info@auxlo.ca or 343-209-2026. A senior practitioner will respond.