Last updated: 24th June 2026
01
SMART FILING PTE. LTD. ("Company", "we", "our", "us") (UEN: 202423317C) operates the Internal Audit platform ("Service").
This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our Service.
This policy is intended to comply with the Singapore Personal Data Protection Act (PDPA).
02
We may collect the following types of information:
Name and job title
Work email address and contact number
Organization or department name and address
Login credentials and authentication records
User role and permission settings
Audit universe and auditable entity records
Engagement plans, working papers, and task assignments
Evidence requests and uploaded documents
Findings, remediation status, and audit reports
Communications and notes within engagement workspaces
Auditee contact details
Evidence submissions and portal activity
Responses to findings or requests
IP address and approximate location
Device and browser information
Activity and system event logs
Security and login event records
We collect information directly from users, auditees, and automatically through the operation of the Service.
03
Personal data may be used to:
Provide and operate the Internal Audit platform
Maintain user accounts, organizations, and access controls
Support audit planning, engagements, evidence collection, and reporting
Enable auditee portal access and collaboration
Maintain activity logs for accountability and compliance
Provide customer support and service notifications
Maintain system security and detect misuse
Improve system performance and reliability
Comply with legal obligations
04
Certain platform features may use automated processing to organize, classify, or analyze uploaded audit data and documents.
Such processing is used only to provide functionality within the Service and is not used to train public AI models unless explicitly stated and consented to.
05
We do not sell personal data.
Information may be shared with trusted service providers who assist in operating the Service, including:
Cloud infrastructure and storage providers
Authentication and identity providers
Payment processors
Email delivery providers
Security monitoring providers
Within your organization, administrators and authorized users may access data according to role-based permissions configured in the platform.
These providers are required to protect data and use it only for service delivery.
06
The Service may store or process data in cloud infrastructure located outside Singapore.
Where this occurs, we take reasonable steps to ensure comparable data protection standards.
07
We implement reasonable security measures including:
Encryption in transit (HTTPS)
Role-based access controls
Audit logging of key platform actions
Infrastructure monitoring
Secure cloud infrastructure
08
Personal data and audit records are retained only as long as necessary to operate the Service or comply with legal obligations.
After account termination, data may be retained for a limited administrative period before deletion, unless a longer retention period is required by law or contract.
09
Subject to applicable law, users may request access to or correction of their personal data by contacting us.
Organization administrators may manage user data and access within their workspace through platform settings.
10
We may update this policy periodically. Updated versions will be published on the Service.
11
For privacy matters, please contact:
UEN: 202423317C
2 Venture Drive
#19-21 Vision Exchange
Singapore 608526