Privacy Policy

Who we are

VendorQuals (vendorquals.com) is operated by Secure Success Launch LLC, a Maryland limited liability company. It is a specialist vendor intelligence platform: an evidence-graded directory of incident response and specialist security firms, a structured RFP builder, and carrier panel readiness analysis. This policy describes what we collect, why, and what we deliberately do not do.

What we collect

Only what a specific feature requires, nothing else:

• RFP submissions: your contact email (required), organization name (optional), and the structured requirements you enter. Used to compute and send your validated firm matches and to follow up on your request.
• Listing requests: the organization details, claimed certifications and panel memberships, GIAC analyst IDs, evidence links, and contact email you submit for evaluation.
• Profile claims: the holder name, GIAC analyst ID, and contact email used to verify a certification-holder profile against public registries.
• Operational logs: standard server logs, including IP addresses used transiently for rate limiting and abuse prevention.

What we deliberately do not do

• We run no advertising and no third-party ad or tracking pixels.
• We run no analytics on this site at publication time; if that changes, this page is updated the same day.
• We do not sell, rent, or share your personal data with third parties for their marketing.
• We do not require accounts to browse the directory or read any content.

How we use what you give us

• To operate the feature you used: sending verification links, evaluation outcomes, and your validated RFP matches to the email you provided.
• To verify claims against public sources, for example, querying the public GIAC Certified Holder Directory with the analyst ID you provide.
• To maintain and improve the platform's data quality.

We do not use your submission data to train third-party models or for any purpose unrelated to the service.

Cookies

The public site sets no cookies. Staff sign-in uses a single session cookie (HttpOnly, SameSite=Lax) that exists only to authenticate the internal tools; it contains no personal data.

Retention and deletion

We keep submission data while the related request is active and afterwards for our records. You may request access, correction, or deletion of your data at any time by emailing privacy@vendorquals.com - we action requests within 30 days. Regulatory or evidence-related records may be retained where we have a legal basis to do so.

Security

Data is stored in a managed Postgres database with access controls; administrative access is authenticated and rate-limited. The site is served over HTTPS. No system is perfectly secure, if you believe you have found a vulnerability, tell us and we will investigate.

Changes to this policy

If we change what we collect, we update this page and the date above. Material changes to how we use existing data are announced to affected users by email.

Contact

Privacy questions and data requests: privacy@vendorquals.com