How we handle data, consent and security. No glossy slide.
This page documents real practices already in production on this site and in Cortex IQ's projects, not promises. Where something doesn't exist yet (like a formal certification), we'd rather not claim it.
What's already in practice
Consent before any tracking
No analytics event reaches Google Analytics until the visitor explicitly accepts cookies. If the visitor declines, nothing is sent. The banner is not decoration.
A named, reachable DPO
[email protected] is a real contact channel for personal data questions, not a generic mailbox.
Public, specific policies
Privacy Policy, Cookie Policy, and an LGPD page published and maintained separately, each with its own text, none copied from a template.
Transparent legal entity
RUNA INTELIGENCIA E TECNOLOGIA LTDA is the legal entity behind Cortex IQ, stated publicly in the site footer.
Edge-level good practice
Security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy) and RFC 8288 Link headers in production. A technical detail, but any audit tool can confirm it.
Governance as a way of working
The Governance As a Service offer treats standardized decision criteria as a deliverable, with a weekly cadence and documented criteria.