Who runs this site
policyandcompliance.com is published by AllyMatter Inc., which also makes one of the tools listed in the directory. That relationship is disclosed on every page and explained on the methodology page.
What we store in your browser
The consent box offers four categories. Necessary is the consent record itself. Preferences covers two small settings kept in your browser's local storage: whether you chose the light or dark theme, and whether you have already seen the subscribe box. Advertising is not in use on this site. If that ever changes, the policy version changes and the box asks you again.
Analytics
We use PostHog (hosted in the United States) to see which pages are read, which filters and links are used, and to watch recordings of visits so we can fix what confuses people. Recordings mask everything typed into a form. Until you tick Analytics, PostHog stores nothing in your browser and counts your visit without an identifier. If you tick it and later send us a help request or subscribe, the email you typed is linked to your earlier visits on this site, so we can see which pages led to the request. This analytics account is separate from AllyMatter's; nothing here is shared with AllyMatter's product or sales systems, and we do not use it for advertising.
The consent record
When you choose, your browser keeps a record of the policy version, the date and your four answers, under a random identifier. A copy of that record, with the same identifier, date and answers and nothing else (no IP address, no browser details), is sent to us so we can show that consent was given. You can change your answers at any time by clearing this site's data in your browser, which brings the box back.
Agreeing to the Terms
Using the site means agreeing to the Terms. Where you send us something, the help request and the subscribe form, you tick a box first, and we keep the date and the Terms version with your request.
If you subscribe
We store the email address you type, the categories you pick, and the time and IP address of your consent, so we can show that you asked for the emails. Nothing else. We use Resend to send the mail and Supabase to hold the list, both acting for us under contract. Every email carries an unsubscribe link, and unsubscribing removes you from the sending list immediately. Ask us to delete the record entirely and we will.
If you write to us
Mail sent to corrections@, ads@ or match@ reaches a person and is kept while we deal with it. If you ask to be matched with firms, we pass on only what you write and only to the firms you agree to. Firms do not see your contact details until you choose one.
Firms listed in the directory
Listings describe organizations, not people. They are compiled from public filings, public registers and firms' own published material, and each record says where it came from. If you are named in a listing and want it changed or removed, write to [email protected] and we will act.
Your rights
Wherever you live, you can ask what we hold about you, ask us to correct it, ask us to delete it, and object to us holding it. One email to [email protected] does any of those. We reply within thirty days.
Security and location
The site is static and served over HTTPS. The subscriber list sits in a database with access restricted to the site's own server functions. We keep subscriber records until you unsubscribe or ask for deletion.
Changes
If this page changes in a way that affects you, the date below changes with it. Last updated September 14, 2026.