Customer account
Email, organisation, role, invitations, support and access logs that are strictly necessary.
DATA, STORAGE AND SECURITY
Private workspaces, clear safeguards and no vague promises.
Certify Express handles more data than a one-off generator because it includes drafts, registers, verification links, recipient documents and internal evidence. That data must therefore be explained and kept only for a defined period.
Read the privacy policyOur basic principle
Each customer workspace is private. Imported data is used to create, retrieve, verify or delete that customer’s documents. It should not be viewed manually unless needed for operations, support, security or a legal obligation.
DATA WE PROCESS
Different data flows stay separate.
Documents
Names, email addresses, attendance, scores, evidence, generated PDFs and verification links attached to the account.
Retention
Proposed defaults: 36 months for documents and registers, 12 months for drafts and 30 days for recipient links.
Service providers
Cloudflare for hosting, Resend if email is enabled, and a payment Merchant of Record and analytics provider to be selected before launch.
WHY THIS IS NOT A ONE-OFF TOOL
Why we retain some information.
A one-off generator can delete files as soon as they are created. Certify Express is designed for a broader workflow: resume a draft, find a session, verify a document, disable a link, replace a version, manage a personal document wallet, or export and delete an account.
This can provide more value, but it requires greater discipline. That is why retention periods, service providers, GDPR rights, incidents and deletion procedures are documented before paid launch.
Before paid launch
- Select the payment provider and billing rules.
- Publish the official support address.
- Confirm backups, restoration and retention.
- Select an analytics provider that respects privacy.
- Update these pages with the OÜ’s registered details.