Privacy

Infosec Standards is an educational reference. We do not sell your data. Inquiries submitted through the contact form go to Aeris Secure.

Analytics

On the production site we use Google Analytics 4 to understand which pages people read and which actions they take (for example, opening the contact form from an article, or sending a message). Google acts as a processor for that measurement. Google's own description of how Analytics works is in the Google Privacy Policy and Google's Analytics data-use notice.

The measurement ID is public in the page source. Analytics loads only on infosecstandards.org. Local development and staging builds do not send data to Google.

We do not use this data for ads personalization. We do not turn on Google signals (cross-device features that rely on signed-in Google accounts).

Risk assessment tool

The risk assessment tool runs entirely in your browser. Everything you enter (your organization name, assets, threats, scores, notes, and sign-off) is stored locally on your device using your browser's IndexedDB storage. It is never sent to Infosec Standards, to Aeris Secure, or to any third party. There is no account, no upload, and no server-side copy.

Exports are generated in your browser and saved wherever your browser puts downloads. We never receive them. If you want a practitioner to look at your assessment, you attach your own file to an email or a contact-form message; the tool does not send anything for you.

We do measure anonymous usage of the tool with the same Google Analytics setup described above: that an assessment was started (and whether it was new, imported, or based on a previous one), which step was reached, which export format was used, whether an import succeeded, that an assessment was marked final or cleared, and clicks on the links to Aeris Secure. These events carry fixed labels only. They never include your organization name, your asset or scenario text, your scores, your counts, or your filenames.

To delete your data, use "Delete" on the tool's start page, or clear site data for this site in your browser. Because your browser holds the only copy, clearing site data removes it permanently, and we cannot recover it for you. Keep your own exported file if you want a backup.

Contact form

If you send a message, we collect the name, email, topic, and message you provide so Aeris Secure can reply. That is handled by our site, not by Google Analytics.

How to limit tracking

You can block Analytics with a browser setting, an extension, or a tracking-protection mode. We do not set a separate cookie banner. If you have a question about this notice, use the contact form.