Start with plain-language guidance for decision makers: what each service helps you achieve, what to expect, and how to take the next step.
Expand the architecture, security controls, implementation scope, and detailed reference guidance on this page. Your planner choices and inquiry stay in place.
Skip to content

Home / Details

Website privacy

How this website handles inquiries and visitor notification data.

Visitor notifications

When visitor tracking is enabled, SOS records page paths, IP addresses, request counts, estimated operating-system platforms and times in a private database, and sends a daily summary to info@secureopensolutions.com. Known crawler user agents are excluded, but the filtering is not a guarantee that every request represents a person. An IP address can identify a shared network or VPN; it does not reliably identify an individual or their exact location. For daily country summaries, public visitor IP addresses are sent to iplocation.com. SOS stores only the returned country, with successful lookups cached for up to 30 days. Country estimates can reflect VPNs or hosting providers rather than the visitor’s location. Platforms are inferred from browser User-Agent headers; the full headers are not retained in the visitor database. Desktop-mode iPads may appear as macOS, and platform information can be absent or spoofed. Daily reports include trends of page requests and unique IP addresses, not verified people.

Anonymous sessions and page journeys

First-party reporting uses a random signed browser cookie and a session identifier to group visits to SOS pages. Browser signals estimate platform and active time while the page is visible and focused, with a two-minute idle limit. Reports include first-to-last observed activity and page journeys, not a verified identity or exact exit time. Cookie clearing, blocked scripts and multiple devices affect continuity. Only SOS pages are observed. The addresses 72.83.208.202 and 138.88.170.34 are excluded. Optional IPinfo country lookups send the public IP to IPinfo; iplocation.com remains the default or fallback provider. Identifiers and journey records follow the configured 90-day default retention.

Enhanced engagement reporting

Additional first-party measurements record active seconds, maximum scroll percentage, service and readiness-tool link use, service-selector use, advisor completion and inquiry or booking intent. They use random tab-session and page identifiers with the signed visitor cookie. No entered answers, question text, form contents, query strings or external browsing are collected by this measurement. The enhanced tracker starts only after you allow analytics in Analytics preferences and respects Do Not Track and Global Privacy Control. Declining stops future enhanced measurements. These choices do not disable the separately disclosed server request logs or legacy journey reporting. Completed inquiry attribution is recorded only after our mail server accepts an inquiry and a recent measured page exists. Booking clicks are not confirmed appointments. Retention follows the visitor database configuration. Daily summaries include anonymous aggregate comparisons and page-level engagement.

Inquiries and scheduling

Inquiry information is sent to SOS for follow-up. Calendar booking is handled through Microsoft Bookings. Do not submit CUI, passwords or other sensitive information through the public inquiry form.

Optional Google Analytics

If SOS enables Google Analytics, you can allow or decline optional analytics. It measures page visits and service, booking and successful inquiry actions. Inquiry contents, names, email addresses, assessment answers, scores and visitor IP records are not included in our custom analytics events. Analytics uses Google’s services and may set cookies. Use Analytics preferences in the footer to change your choice.

Form verification

Forms use rate limits, a hidden spam field and expiring, single-use verification. If Cloudflare Turnstile is enabled, your browser connects to Cloudflare and the server verifies its token before accepting an inquiry. Scheduling is available if verification cannot complete.

Operational records

The hosting server also maintains access and error logs. The visitor database survives container updates and retains records for 90 days by default. Emailed summaries and hosting access/error logs are separate records and follow SOS administrative retention practices. Contact SOS to ask about handling or deletion of your inquiry or activity records.

SOS AI Advisor and public questions

The public advisor accepts short questions only. Please do not submit CUI, export-controlled data, nonpublic contract documents, secrets, or personal information. If AI processing has been enabled by SOS, question text is sent to an OpenAI API model for a stateless response; this is external processing. When AI is unavailable or disabled, locally authored guidance is displayed instead. SOS does not retain advisor question text or model responses in the visitor database. We retain aggregate daily topic/request totals to limit misuse and measure interest; consent-based analytics may additionally record topic and completion events. Technical service logs can record errors and request metadata, but not intentionally the submitted question. AI output is preliminary planning information, not a formal legal, cybersecurity, or assessment finding.

Service planner choices

The service planner keeps only the selected categories and timing in this browser tab for up to 30 minutes. It does not store your inquiry text. When you continue to an inquiry, the selected categories may be carried in an on-site URL and used to prefill an editable form. They are included in the inquiry only when you choose to send it.

Optional first-party analytics can count planner completions, inquiry starts, and service-scope reading, alongside briefing and tool use. Reports show same-session associations and selected service categories for SMTP-accepted inquiries; they do not establish sales qualification or causation. These enhanced metrics honor your analytics choice, Do Not Track and Global Privacy Control. Names, email addresses, free-text form contents and planner answers are excluded from analytics.

Reading detail preference

The Executive View and Technical View controls remember only your chosen reading level in browser storage and a first-party cookie named sos_detail for up to 180 days. This functional preference does not contain form text or enable visitor measurement. You can change it using either control or clear it with your browser’s site data.