Legal & Privacy.
The notice for AuditSenior.com, a project showcase provided by Bonfleur s.r.o., the data controller. This site is informational only: it offers no services, sells nothing, and creates no engagement or professional relationship with anyone who browses it or writes to us.
What we collect, and why
We collect data necessary to operate the platform and respond to inquiries. No data is sold or shared for marketing purposes.
- Data controller
- Bonfleur s.r.o. (IČO 28169166), Czech Republic. Registered in the Czech commercial register (or.justice.cz).
- Contact form
- Name, email, role (required selector), and message field (required). Used solely to respond. We do not store submissions in an application database; delivery is handled by a transactional-email sub-processor whose own policy governs retention of delivery metadata and logs.
- Platform accounts
- Authentication data managed by our identity sub-processor. Evidence files stored in the account holder's tenant and isolated from every other tenant.
- AI processing
- Evidence content sent to our AI inference sub-processor for extraction and testing. Not used for model training, per the AI provider's commercial-API terms.
- Retention
- Account holders control their own data lifecycle: every workpaper can be exported via the 13-section export, evidence files archived off-platform, and engagements deleted at will. When access ends, our standard offboarding practice is a 30-day export window, after which platform access is revoked and tenant-scoped content is deleted. No retention obligation is assumed on anyone's behalf — any retention obligation runs against off-platform copies, not this demonstration platform.
- EU / EEA residents
- You may contact us with data-access or erasure requests; such requests are handled within the timeframes applicable law provides. AuditSenior.com is not actively marketed in the EU; this notice is provided for transparency.
No marketing mailing list. No cross-site tracking cookies, advertising cookies, or marketing-analytics cookies. We use cookieless usage analytics (via our hosting provider) that does not identify individual visitors or set tracking cookies; strictly necessary cookies only. On this basis the site shows no cookie-consent banner.
Documentation tools, not audit opinions
Platform outputs are documentation tools, not audit opinions or attestation reports. The platform is provided as-is, without warranties of any kind (express or implied), to the fullest extent permitted by applicable law.
- No offer of services.
- This site is a project showcase. Nothing on it — including the contact form — constitutes an offer of services, software, or professional engagement of any kind. No contract, engagement, professional-client relationship, or duty of care arises from viewing this site, using the demonstration platform, or corresponding with us.
- Not a CPA firm.
- AuditSenior.com does not perform audits, issue audit opinions, provide assurance, or render attestation reports.
- Not legal or accounting advice — no reliance.
- All content is a demonstration, provided for information only. It is not audit guidance, methodology advice, or professional advice, and must not be relied upon for any audit, compliance, or regulatory purpose. Qualified professionals own all audit conclusions, professional judgments, and regulatory decisions.
- Limitation of liability.
- To the fullest extent permitted by applicable law, Bonfleur s.r.o. accepts no liability for any loss or damage arising from use of, access to, or reliance on this site, the demonstration platform, or their content.
- Primary data in the United States.
- The application is served from Vercel's US East region (Washington, D.C. area; region code iad1) and primary data is stored on Neon in AWS us-east-1 (N. Virginia); other sub-processors may process transactional metadata in their own operational regions per the Sub-processors section below.
Platform scope
AuditSenior.com is an ITGC audit-automation platform published as a working showcase. We are not a CPA firm and do not perform audits, issue audit opinions, provide assurance, or perform attestation services.
- The platform is published as a working demonstration. Access to it is by invitation only and may be limited, modified, or withdrawn at any time without notice.
- Platform outputs are documentation tools — not audit opinions or attestation reports — and are demonstration artifacts unless a separate written agreement, negotiated and executed outside this site, says otherwise.
- Anyone granted access is responsible for their own professional judgments, conclusions, and regulatory decisions; the platform enforces mandatory human review precisely because the judgment is never the software's.
- The showcase carries no certification, compliance audit, uptime commitment, or warranty of any kind.
AI features
The platform uses AI (Anthropic Claude API) for evidence extraction, testing, and draft generation. AI outputs are probabilistic and require professional review.
- Mandatory auditor review enforced by the platform; AI never auto-finalizes conclusions.
- AI tests run only on samples with mapped evidence (evidence-first — no mapped evidence means inconclusive).
- Data not used for AI model training (per the provider's commercial-API terms).
- Full AI provenance stored with each result.
This site sells nothing and promises nothing
AuditSenior.com is a showcase. No subscription, managed service, custom build, or other commercial arrangement is offered through this site, and no message sent through it can create one. Any commercial relationship with Bonfleur s.r.o., should one ever exist, would arise only from a separate written agreement negotiated and executed outside this site — this site itself creates none.
In every circumstance, all audit conclusions, professional judgments, sign-offs, and determinations of regulatory adequacy remain the responsibility of qualified professionals; AuditSenior.com and Bonfleur s.r.o. do not perform audits, issue audit opinions, provide assurance, or render attestation reports.
The third-party processors that deliver the platform
| Clerk | Authentication |
|---|---|
| Neon | Managed PostgreSQL database |
| Vercel | Hosting + platform delivery + transactional log storage |
| Vercel Blob | Evidence-file blob storage; tenant-scoped paths; tenant audit files at rest |
| Anthropic | AI inference |
| Pinecone | Content-retrieval index; tenant-isolated namespacing for evidence excerpts, workpaper narratives, and exception descriptions; matching is exact-text, not semantic similarity |
| Resend | Transactional email for contact-form delivery |
| Upstash | Redis-based rate limiting + distributed locks for AI-test / QC / population concurrency; request IPs + user identifiers only, no tenant audit content |
Primary data storage is in the United States (Neon, AWS us-east-1); transactional sub-processors may process metadata in their own operational regions per their published policies. This list documents the running demonstration platform and describes the demonstration platform as presently deployed; it may change as the build evolves.
Strictly necessary only
Only strictly necessary cookies for authentication and theme preference. No analytics or marketing cookies.
- theme — light/dark preference (persists up to 1 year).
- __session, __clerk_db_jwt, __client_uat, __refresh_* — authentication session + refresh tokens (Clerk; our identity sub-processor).
- No third-party tracking; any usage analytics is cookieless (no cookie is set).