Yotli provides compliance assessment and attestation software for organizations. This policy explains the information we collect, how we use it, and the controls available to customers and site visitors.
We collect information you provide directly, including name, work email, organization, contact messages, uploaded documents, questions, assessments, assignment records, and assessment responses. We also collect operational data such as device, browser, IP address, authentication events, and product usage needed to secure and operate the service.
We use information to provide the service, process documents, generate and score assessments, send transactional notifications, support customers, prevent abuse, maintain audit records, and improve product reliability. Customer content is used only to provide and maintain the service unless a customer separately authorizes another use.
We use vendors for hosting, authentication, storage, AI processing, email delivery, payments, and observability. These providers process information only as needed to deliver their services to Yotli.
We retain customer records for the period needed to provide the service, meet contractual obligations, preserve audit history, and comply with law. We use technical and organizational safeguards designed to protect customer data, including access controls, encrypted transport, and least-privilege operational practices.
Customers may request access, correction, export, or deletion of personal information, subject to contractual, legal, security, and audit-retention requirements. Organization administrators control employee access and assessment records within their workspace.
Questions? Email hello@yotli.com.