Privacy Policy

AUDIT ONLINE SOLUTION SDN BHD ("Company", "we", "our", "us") (Reg No: 201101002832 (930970-T)) operates the AuditPlus platform ("Service").

This Privacy Policy describes how we collect, use, disclose, and safeguard personal data, financial documents, and business information when you access or use our Service.

This policy is formulated to comply with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable privacy regulations.

We collect information directly from you when you register, upload files, or interact with our platform, as well as automatically through your use of the Service:

We collect and process personal and engagement data for specific, lawful purposes including:

• Providing, maintaining, and enhancing the AuditPlus platform and features
• Automating audit workflows, workpaper generation, and document parsing
• Managing firm accounts, team member permissions, and role-based access
• Delivering responsive customer support, technical assistance, and training
• Maintaining system integrity, detecting anomalies, and preventing unauthorized access
• Improving service reliability, application performance, and user experience, subject to the data-use limitations described in this Privacy Policy.
• Complying with statutory, regulatory, and professional auditing obligations

AuditPlus incorporates advanced automation and artificial intelligence (AI) models to analyze documents, extract financial figures, and assist audit procedures.

All client documents and proprietary audit information are processed strictly in an isolated environment solely to provide Service functionality. Your confidential documents and proprietary data are never used to train public or shared AI models.

AuditPlus's use of information received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements.

AuditPlus does not use raw or derived Google Workspace API user data to develop, train, or improve generalized or non-personalized artificial intelligence (AI) or machine learning (ML) models.

Google Workspace API user data is used only to provide the user-facing functionality requested by the user, including enabling users to send emails through their connected Google account.

We do not sell, rent, or monetize your personal data or client documents under any circumstances.

We may share data with vetted third-party service providers who assist us in operating the platform, subject to strict contractual confidentiality and data security obligations:

• Enterprise-grade cloud infrastructure and hosting providers
• Encrypted backup and disaster recovery services
• Transactional communication and email delivery services
• Security monitoring and threat detection platforms

We prioritize the confidentiality and integrity of your audit data through comprehensive technical and organizational safeguards:

• End-to-end encryption for data in transit (TLS 1.3 / HTTPS)
• Strong encryption for sensitive data at rest (AES-256)
• Strict role-based access control and principle of least privilege
• Multi-tenant database isolation and granular permission boundaries

Personal data will be retained only for as long as necessary for service operation or legal compliance.

Users may request access to or correction of their personal data by contacting us.

We may update this policy from time to time. Updates will be published within the Service.

If you have any questions, feedback, or requests regarding this Privacy Policy or how AuditPlus protects your data, please reach out to us: