Blue Ocean Consulting LLC (“we,” “us,” or “our”) is committed to protecting the privacy and security of the personal and institutional data we process. This Privacy Policy governs your access to and use of our consulting services and the Compass AI GRC platform (collectively, the “Services”). By utilizing our Services, you consent to the data collection and management workflows outlined in this document.
We collect information necessary to provide specialized regulatory compliance consulting and to operate our native-AI software architecture efficiently:
Account Credentials: Full name, corporate email address, professional job title, firm name, corporate physical address, and secure billing information.
Institutional Compliance Data: Internal policies, written supervisory procedures (WSPs), books and records documents, communication logs, and historical regulatory findings ingested directly into the Compass platform.
Technical Telemetry: IP address, browser type, operational timestamps, and automated system interaction tracking logs.
Your information is processed under strict confidentiality baselines to execute our contractual engagements:
Generating firm-specific compliance reviews, rule mappings, and localized risk assessments.
Training client-specific Compass AI models locally without cross-contaminating shared or public machine learning databases.
Transmitting requested regulatory alerts, continuous surveillance signals, and official operational summaries.
We enforce institutional-grade administrative and technological controls to protect client data.
Security Standards: All incoming and archived telemetry is secured using AES-256 encryption at rest and TLS 1.3 encryption in transit. Our database networks map strictly to WORM (Write Once, Read Many) protocols matching SEC Rule 17a-4 and Rule 204-2 archive constraints.
Registered clients and marketing subscribers retain complete autonomy over their data:
Opt-Out Control: You can adjust your communication settings or invoke your opt-out rights directly within our interface via the integrated Unsubscribe module.
Account Closure: Upon formal account closure, all stored institutional data is scrubbed securely from live production nodes within 30 calendar days unless retention is legally mandated.
