Your answers are not stored.
The short version: you can use the compliance checker without an account, and we do not keep your answers. This page explains what happens with the data that does pass through, how we store it, and for how long.
The checker
When you answer the questions, your answers are sent to our server, used to generate your report, and then discarded. We do not save them, and there is no account or profile attached to them. Refreshing the page loses the report, because there is nothing stored to load.
If you ask us to email you your report
If you enter your email address and tick the box to receive your compliance report, we generate it on our server and send it to you through our email provider, Resend (a US-based processor). Your email address and the fact that you consented are shared with Resend for that purpose only. Resend's standard contractual clauses cover the international transfer.
Signing up for occasional UK compliance updates is a separate choice, a second checkbox, unticked by default, that you tick only if you want it. Only if you tick it do we add your email address to our contact list within Resend, tagged with a source label (such as "report\_email") so we can send relevant updates. We keep your contact details until you unsubscribe or ask us to remove them. You can unsubscribe from any email, or write to us at any time to be removed entirely.
The director ID verification tool
Looking up a company sends the company number, or your search text, to the public Companies House register, which returns public information about that company, including its directors' names and whether each has completed identity verification. That is public register data about the company and its directors, not personal data about you, the person doing the lookup.
If a deadline is still outstanding and you choose to be notified about it (and other relevant compliance deadlines) in future, we add your email address to our contact list on the same consent basis as above (tagged with source "checklist\_deadlines" or "idv\_notify"). No email or calendar file is sent to you immediately, notification happens later, and you can unsubscribe or ask to be removed at any time.
The company setup checklist
If you use our company setup checklist at /start/, we store the information you provide: your chosen company name, your email address, whether you have a business website (and its address, if so), and which steps you have completed. If you verify your company with Companies House, we also store your company number and the registered name returned by Companies House, which replaces the company name you originally typed. If you run the compliance check from within the checklist, we also store your answers and which results you have marked as sorted, so you can leave and come back to the same results without starting over. This data is kept so you can resume your checklist later: we email you a link.
It is stored on Supabase, a cloud database provider (hosted in the EU, eu-central-1 region). Supabase is a data processor acting on our instructions; the data is accessible only to our backend servers, not to other users. We keep checklist data for 12 months from your last activity, after which it is deleted. You can ask us to delete it sooner at any time.
If you tick the optional box to receive UK compliance updates, we also add your email to our Resend contact list with the source "startflow" so we can send relevant updates.
When you return to your checklist, we set a small functional cookie (gs\_start\_token) so your browser remembers your place. It stores a random identifier, no personal data, and expires after 30 days. It is strictly necessary for the checklist to function and is not used for tracking or advertising.
The company dashboard (beta)
The dashboard is a separate, logged-in product for tracking compliance across one or more companies over time. It is distinct from the free checker described above, currently in early beta and expected to become a paid product once it leaves beta. Using it today does not commit you to anything, and it remains free while in beta, but the data described below is already being collected for anyone who creates an account.
Creating an account stores your email address with Supabase Auth. We use passwordless sign-in (a link emailed to you each time), so we never hold a password. You may optionally add a display name to your account, which we store alongside it.
For each company you add, we store the company name, its Companies House number and registered name if you link one, its website address, any logo image you upload, and the contact details (name, email, phone) of anyone you add as a contact, such as an accountant or solicitor. We also store the answers you give within the dashboard and the status you set for each compliance result (for example, snoozed, not applicable, or delegated to a contact), so you can leave and return without starting over, and any custom reminders you add. This is different from the standalone checker: dashboard answers are retained for as long as the company record exists, not discarded after the report is generated.
Uploaded logo images are re-processed on our server before storage, which strips metadata (such as GPS location) that an original photo file can carry. Images are stored in Supabase Storage, same processor and EU region as everything else described here.
Your sign-in session is kept in your browser's local storage by Supabase's own authentication library, not a cookie, solely to keep you signed in between visits. It is not used for tracking or shared with analytics.
If you connect an AI assistant (such as Claude) to your dashboard account, it signs in the same way you do, and can only read your own companies' data, it cannot add, change or delete anything. You can revoke that access at any time from your assistant's own connection settings.
Deleting a company from the dashboard deletes its contacts, answers, reminders and uploaded logo. Write to hello@getsorted.today to request deletion of your whole dashboard account.
Who processes your data
We work with the following data processors:
- Vercel (US) — hosts our website and API. Request logs including IP addresses are retained by Vercel for error diagnosis and may contain technical data from your visits. We do not log your answers or personal data in application logs.
- Supabase (EU, eu-central-1) — stores your company setup checklist data and, if you use it, your dashboard account and company data (including uploaded logo images, via Supabase Storage), as described above, on our instructions.
- Resend (US) — delivers emails and stores contact details when you opt in to updates. International transfers are covered by standard contractual clauses.
- Ahrefs Analytics — cookieless page-view counting, no personal data stored.
- Umami — cookieless product analytics, no personal data stored.
Partner links
Some actions in your report link to partner services, such as insurance or software. Those links carry a short, non-identifying reference to the regulation they came from, so the partner network can credit us with a commission if you buy. The reference does not identify you. Clicking one briefly passes through a page on getsorted.today before continuing to the partner, so the link stays working even if the partner changes their web address.
Cookies and analytics
We do not set advertising or profiling cookies, and we do not track you across sites.
We use Ahrefs Analytics, a cookieless service, to count page views in aggregate. It sets no cookies, stores nothing on your device, and never sees your answers. Your IP address is processed transiently to produce anonymous statistics and is not kept.
We also use Umami, another cookieless analytics service, to record anonymous product usage, such as how many people start the checker, how far they get, and which partner links are clicked. It sets no cookies and does not identify you; it cannot be linked back to your answers or your report.
Our company setup checklist uses a strictly necessary functional cookie (gs\_start\_token) to remember your place. It stores only a random identifier, expires after 30 days, and is not used for tracking. You can delete it from your browser settings at any time.
How long we keep data
- Checklist data (Supabase): 12 months from your last activity, or until you ask us to delete it.
- Dashboard account and company data (Supabase, beta): kept for as long as your account and company records exist. Deleting a company removes its contacts, answers, reminders and logo; write to us to delete your whole account.
- Email contacts (Resend): until you unsubscribe or ask us to remove you.
- Compliance check answers: not stored when you use the standalone checker at /checker/, discarded immediately after generating your report. If you run the check from inside the /start/ checklist, your answers and sorted-status are stored as checklist data (see above), same 12-month retention.
- Analytics data (Ahrefs, Umami): anonymised and aggregated, retention governed by each provider's own policy.
Your rights
You have the right to access, correct, or delete any personal data we hold about you. If you have given us your email address (for a report, a reminder, a checklist, or a dashboard account) and you want it removed, write to hello@getsorted.today and we will remove it from all systems. Compliance check answers from the standalone checker at /checker/ are not stored, so there is nothing to show or delete for those; answers from a compliance check run inside a /start/ checklist, or a dashboard company, are deleted along with the rest of that checklist's or company's data.
You also have the right to complain to the ICO if you believe we have mishandled your data. We hope you would talk to us first.
International transfers
Some of our processors are based in the United States (Vercel, Resend). Where personal data is transferred outside the UK, we rely on standard contractual clauses or the processor's UK-specific data processing agreement as the lawful safeguard.
Who is responsible
The data controller is XGR Labs Ltd, a company registered in England and Wales, company number 17107452. Contact: hello@getsorted.today.
Last updated: September 2026