Evaluation privacy notice

Permitted case information

You may evaluate OSE using genuine situations from your business when every case fact you enter is authorised by your organisation, non-personal and non-confidential. This can include actual obligations described in your own neutral words, real deadlines, non-confidential conditions or measurements, and actual outcomes. Use a neutral case label. Enter only the precision needed to assess the workflow; generalise or leave out details that could identify a person or reveal a confidential relationship, process or commercial term.

Do not enter confidential commercial information, contract wording, non-public prices or margins, confidential thresholds, customer or supplier identifiers, order/shipment references, personal case data, names, contact details, credentials, secrets, URLs or private document links. Do not upload files, paste contracts or other documents, add screenshots, or paste copied evidence. If a real case cannot be evaluated without restricted details, do not use that case in this environment.

Account and request information

OSE separately processes the minimum information needed to review trial requests, create and secure accounts, invite members, administer access and respond to commercial enquiries. This can include names, work email addresses, company and role, password hashes, membership, session, MFA and security records. Names and work email addresses can be personal data; they are account/request information, not permitted case evidence. Do not place them in workflow, assessment, evidence, correction or remediation fields.

Assessment and organisation exports contain the text records you entered. Treat each export as containing the same non-personal, non-confidential case facts, store it appropriately and do not forward it with restricted information.

The application also stores organisation and membership records, workflow definitions, text-based assessment facts, event and determination history, trial requests and commercial follow-up requests. First-party evaluation analytics stores event names, timestamps, traffic class and limited attribution; it does not intentionally collect evidence text, IP addresses or full referrer URLs.

Evaluation service components

The restricted profile is designed to run the application on an OCI Always Free compute instance in London and use a Neon Free PostgreSQL project selected in London's aws-eu-west-2 region. The database connection requires encrypted TLS with certificate and host verification. Encrypted database backups are designed for a private OCI London Object Storage bucket, using client-side encryption. These components are not represented as provisioned or verified until the owner completes setup and the separate hosted release run passes.

Automated external email is disabled. Messages remain in OSE's private outbox for the founder to review and send manually from the existing OSE mailbox. OSE does not claim inbox delivery from an outbox record.

Purpose and contact

This evaluation is for testing the supported OSE workflow against real, low-sensitivity operational situations. It is not a production system of record, document repository, confidential-information service, or legal or financial decision service. OSE evaluates the facts supplied by users and does not independently authenticate source documents or establish that supplied facts are true. Contact hello@osehq.com for evaluation questions or a data request.

The hosted configuration, account-specific provider terms, legal notices, retention process and recovery arrangements are not approved as a live customer service until the owner completes setup and the hosted release gates pass. This notice and service arrangements still require owner/legal review before external invitations are enabled.