SECURITY & TRUST

Clear boundaries. Accountable decisions.

WooluRisk’s approach to customer data protection combines access controls, private documents and human oversight.

Organization-separated records

Vendor records, assessments and privacy reviews are scoped to your organization. Access checks keep organization records separate.

Role-based access

Signed-in users receive permissions based on their assigned role. Administrative actions and review decisions are restricted to authorized roles.

Private document access

Evidence and agreement documents use private storage. Authorized users access files through time-limited links, and document verification requires human review.

Audit history

Recorded application changes create audit history. Users can read permitted audit records but cannot edit the audit log through the application.

Human-reviewed AI

AI-generated answers and recommendations remain unverified drafts. AI does not approve assessments, replace human decisions or change the fixed vendor scoring formula.

Published by WooluRisk · ATG LLC. These statements describe application safeguards, not a certification, audit opinion or guarantee of regulatory compliance. Internal AI-use decisions do not imply external access blocking.

Trust Center

Visit the separately managed Trust Center for its published information.

Open Trust Center

Security questions?

Contact WooluRisk for security questions or to discuss your review requirements.

hello@woolurisk.com