Legal
Last updated September 2, 2026
This explains what Sentinel Group, LLC, doing business as FullyComply, collects, why, who else sees it, and how long it is kept.
Your name, email address, company name, and the time zone you choose. A password, stored only as a cryptographic hash — we cannot read it and cannot tell you what it is.
The properties, projects, vendors and subcontractors you add, the requirements you set, and the certificates of insurance you upload. Those certificates contain information about third parties: the insured company, its insurance agent, policy numbers, coverage limits and dates.
A record of actions taken in your account — who uploaded a certificate, who sent a request, when somebody signed in. The IP address a session was created from. Whether an email we sent was delivered.
We do not collect or store card details. Payment is handled entirely by Stripe. We keep an identifier for your Stripe customer record, which plan you are on, and when it renews.
To run the service you asked for: reading certificates, checking them against your requirements, and asking agents for documents on your behalf. To keep your account secure and to show you what has happened in it. To take payment. To answer you when you write to us.
We do not sell personal information, do not share it with advertisers, and do not use it to build profiles of anybody.
Uploaded certificates are sent to Anthropic's API to extract what the document states. Anthropic processes them on our behalf under commercial terms that prohibit using the content to train models. Extraction is automated and can misread a document, which is why you can correct any reading before it is filed.
We use a small number of companies to run the service. Each sees only what it needs:
We may also disclose information if the law requires it, or to protect our rights, safety or property. If our business is sold or merged, information may transfer with it, and we will say so beforehand.
On the public pages — the home page, pricing, the free reader and these legal pages — we ask before setting anything that is not strictly needed. Until you answer, and for anything you decline, no cookie is set and nothing can identify you.
There is no measurement of any kind once you are signed in. None of this runs inside an account.
One cookie holding your sign-in, and the check that stops our public forms being scripted. Neither can be declined, because without them the product cannot work. The sign-in cookie is removed when you sign out.
Google Analytics, to see which pages are visited and for how long. It tells us what helps and what does not. The site works the same whether you allow it or not.
Google and Meta, so we can tell which adverts brought somebody here and show ours to people who have visited before. Declining means our advertising becomes less accurate; it does not mean you see more of it. If you decline, the Meta pixel is not loaded at all rather than loaded and told to stay quiet.
Remembers what you looked at so a later visit can show something more relevant.
To change your mind, clear this site’s data in your browser and you will be asked again.
When you ask an insurance agent for a certificate, the message goes from our systems on behalf of your company, and includes the vendor, the job and a link for sending the document back. That agent's email address is information you have supplied, and you are responsible for having a legitimate reason to contact them.
An agent can upload a certificate through that link without creating an account. We store what they send and the fact they sent it.
While your account is active, everything in it is kept so the service can work.
When an account closes, everything is kept for ninety days so you can come back to it. We email at sixty, thirty, fifteen and seven days before the deadline. After that it is permanently deleted — records, documents and the account — and cannot be recovered.
Some records are kept longer where the law requires, such as invoices for tax purposes, which Stripe holds under its own retention rules.
You can see and change your own information at any time from within the product. You can export your compliance records as a spreadsheet or a printable report whenever you like.
Write to support@fullycomply.com and we will, within a reasonable time:
Depending on where you live you may have further rights, including asking us to restrict how information is used. We apply these requests to everybody rather than only where the law compels it.
Traffic is encrypted in transit. Passwords are stored only as salted hashes. Sessions expire after inactivity — two hours for staff accounts, twelve for customers — and every action taken by our staff inside a customer account is recorded on that account.
No system is perfectly secure. If a breach affects your information we will tell you promptly and explain what happened.
FullyComply is a business product and is not directed at anyone under eighteen. We do not knowingly collect information from children.
We operate from the United States and our providers may process information in the United States and elsewhere. Using the service means agreeing to that.
We may update this policy. Material changes will be notified by email or in the product before taking effect, and the date at the top will change.