Loading your compliance data…
Loading your compliance data…
Last updated: 18 September 2026. Enigma Partners Global Limited (SC893958)
EPG:Comply is operated by Enigma Partners Global Limited, a company registered in Scotland (SC893958) with its registered office at Third Floor, 3 Hill Street, Edinburgh EH2 3JP. We are the data controller for personal data collected through this platform.
Contact: [email protected]
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Deliver your assessment report; follow up on results | Consent (Article 6(1)(a) UK GDPR) |
| Organisation name | Personalise your report | Consent |
| Assessment answers | Generate your compliance score and gap report | Consent |
| IP address (hashed) | Security and fraud prevention | Legitimate interests (Article 6(1)(f)) |
| Usage data | Platform security and audit logging (ISO 42001 requirement) | Legitimate interests |
The current Early Access release uses questionnaires, manual registers, policy templates and code-generated reports. AI assessment features are disabled in this release. The free self-assessment scores answers without an AI model.
Our governed-AI framework is in development. Before introducing AI features, we will update this notice to explain the processing, providers and available choices.
Assessment results and contact data are retained for 24 months from collection. Audit logs are retained for 36 months. You may request deletion at any time (see section 6).
We do not sell your data. We share data only with:
Under UK GDPR you have the right to:
To exercise any right, email [email protected]. We will respond within 30 days.
EPG:Comply uses only essential session cookies required for the platform to function. No advertising, tracking, or analytics cookies are set. No consent banner is required.