Privacy Policy
Garrison Compliance Group LLC · Effective July 4, 2026 · Last updated July 4, 2026
Who we are
GovComply is a product of Garrison Compliance Group LLC (“Garrison,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, and protect information when you use govcomply.com and the GovComply platform. Questions: privacy@govcomply.com.
Information we collect
We collect information you provide directly — your name, work email, company name, job title, and details submitted through demo request, assessment, and subscription forms.
If you use the GovComply platform as a customer, we also process compliance data you upload or connect — contract documents, cost structures, supplier records, and related materials. This data is processed solely to provide the compliance services you’ve subscribed to.
We collect standard website analytics (page views, referral source, browser type) through server-side logs. We do not use third-party advertising trackers.
How we use it
We use information you provide to respond to demo requests and inquiries, deliver the GovComply platform to paying customers, send email updates you subscribe to, and improve the product. We do not sell your information. We do not share it with third parties for marketing purposes.
Compliance data processed through the platform is used exclusively to deliver the services described in your subscription agreement. It is not used for AI model training.
Data storage and security
All platform data is stored in AWS GovCloud (US), a US-persons-only region pre-authorized for FedRAMP High workloads. Data is encrypted at rest using FIPS 140-2 compliant KMS customer-managed keys and in transit using TLS 1.2 or higher with FIPS-approved cipher suites.
Website contact data is stored in our CRM, a US-based provider operating under standard data processing terms. This data does not enter the AWS GovCloud environment.
Data retention
Website contact data is retained for as long as the business relationship is active or as needed to respond to inquiries. You can request deletion at any time by emailing privacy@govcomply.com.
Platform compliance data is retained for the duration of your subscription plus 90 days following termination, after which it is permanently deleted. Audit logs are retained for 7 years per our WORM policy.
Cookies
This site uses only essential cookies required for the site to function (session management, form security tokens). We do not use advertising cookies, retargeting cookies, or third-party analytics cookies that track you across other sites.
Your rights
You may request access to, correction of, or deletion of your personal information at any time. Send requests to privacy@govcomply.com. We respond within 30 days.
Changes to this policy
We will post material changes to this policy on this page with an updated effective date. If changes materially affect how we handle your data, we will notify active platform customers by email.
Contact
Garrison Compliance Group LLC
Privacy inquiries: privacy@govcomply.com
Security disclosures: security@govcomply.com
General contact: contact@govcomply.com