Understand the information behind the workspace.

Information used by the service

Accounts use an email address and authentication information. Workspace records may include names, project details, client and dutyholder contact details, activity records and evidence files supplied by authorised users. Hosting and authentication services may also process technical request information, such as IP addresses.

Only upload information you are authorised to share. Avoid unnecessary sensitive personal information in project records and evidence files.

Website enquiries

The contact form collects your name, email address, optional organisation, enquiry type and message so we can handle your enquiry and reply. Messages are sent through Resend to our Zoho Mail inbox. Please leave out sensitive personal information, passwords and confidential project documents. The form does not add you to a marketing mailing list.

You can contact us directly at contact@cdmlogic.co.uk, including for questions about your enquiry information.

Cookies and browser storage

Authentication cookies support sign-in and session continuity. A workspace-selection cookie remembers the active organisation. An invitation-return cookie can retain the destination during the sign-in journey.

No advertising pixels, marketing analytics, embedded social feeds or external font services have been added to these public product pages. The application uses system fonts. This does not mean the entire service is cookie-free.

You can clear cookies through your browser settings. Doing so may sign you out or reset the selected workspace. Links to external guidance take you to services with their own privacy and cookie information.

Service providers

The current service uses Vercel for application hosting, Supabase for authentication, database and private file storage, Resend for transactional account email and contact-form delivery, Zoho Mail for enquiries, and Cloudflare R2 for evidence backups. The live database is configured in London and the evidence backup bucket uses an EU jurisdiction. These locations do not mean every provider’s processing is confined to the UK or EU.

Private workspace access

Workspace roles and database access rules restrict project information to authorised users. Evidence download links require authorised access. These controls support access management; they are not a promise that any online service is risk-free.

Full privacy information

The operator’s identity and contact details, lawful bases, retention arrangements, international transfer information and rights-request process must be confirmed in the full privacy notice before general launch. See pilot and launch status.

Background information: ICO — the right to be informed and ICO — storage and access technologies.

Technical description reviewed 3 October 2026. The full privacy notice remains a launch requirement.