Your information
This notice describes how the early-access Handover Ready service handles information. It was last updated on 13 November 2026.
What is stored
To provide the service we store: your email address and name; your organisation's sites, members and roles; the modifications you create, their answers, requirements, decisions, comments, communications and handover records; and the documents you upload. Uploaded files are stored in our database alongside the records they belong to.
Data is held on Cloudflare's platform. The database was created with a Western Europe location preference; Cloudflare decides the exact data centre and this is not a guarantee that data stays in one country.
Who can see it
Access is by invitation. People see only the organisations they belong to, and within them only the sites, modifications and documents their roles allow. Vendors added to a single modification see only that modification and their own work on it. Permissions are checked on the server for every request.
The audit trail
Every change, decision, acceptance and acknowledgement is recorded with the person and time in an append-only audit trail. Issued document revisions and audit entries are kept permanently and cannot be edited, because that is the purpose of the record. A closed modification can be reopened with a recorded reason, but its history is not removed.
Sign-in and email
Sign-in uses a one-time code sent by email; there are no passwords. Codes and sessions are stored only as one-way fingerprints. Your browser keeps one sign-in cookie, which scripts on the page cannot read. Emails (sign-in codes, invitations and workflow notifications) are sent through Resend.
Contact messages
If you use the Contact form, your name, email address, selected topic and message are processed to answer your enquiry, using Cloudflare Turnstile for spam protection and Resend for delivery when configured. Do not send confidential project documents through the Contact form.
Preferences
Your appearance choice and the organisation you last opened are saved in this browser. The site does not use advertising trackers or third-party analytics.
Requests and early-access status
To ask about your information, request a correction or ask for an organisation's data to be exported or deleted, choose “Privacy request” on the Contact page. Records that form part of a closed modification's audit trail may need to be kept by the organisation that owns them. The product and its data handling may change during early access; this notice will be updated when they do.