soc2pentest

A plain-English reference on SOC 2 for European vendors: who may issue the report, and what the penetration test is actually for.

Run the gap finder

Cookies and browser storage

Updated

Cookies set by this site

None. The site application sets no cookies at all: no advertising cookies, no analytics cookies and no session cookies. It embeds no social, video or chat widgets, and the analytics script works without cookies. Cloudflare's hosting security features are separate from the application and may process technical request data or set their own security cookies.

Browser storage

Unless you use the inquiry form, the site writes nothing to local storage or session storage. There is no theme preference to remember, because the site has a single light appearance and no appearance control. The readiness worksheet keeps your selections in page memory only; they are discarded when you close or reload the page.

If you start filling in or submit the inquiry form, Cloudflare Turnstile, which protects it from automated spam, loads in a frame from challenges.cloudflare.com and keeps one technical entry, cf.turnstile.u, in that frame's local storage for bot detection. It stays until you clear this site's browser data. It is strictly necessary for the security of the form you choose to use, so it does not require consent. Nothing is stored if you do not use the form; if Cloudflare asks for an additional check, it may set its own security cookies.

One optional local-storage value is read if you have set it yourself: plausible_ignore. When its value is true, no analytics events are sent. The site never creates this value; if you set it, it stays until you remove it or clear the site's browser data.

Page views, OffSeq link clicks and the inquiry form

The site sends page views, clicks on OffSeq service and contact links, and successful inquiry form submissions to our self-hosted Plausible service at in.ainalytic.net. Each event contains the public page address, limited campaign parameters, the referring site's origin when available, the event name and the site domain. A link-click event adds a static destination path and a placement label such as header, hero or gap-finder. A form-submission event adds only the form's placement label. Nothing you type into the inquiry form is stored in your browser or included in an analytics event. Worksheet answers are excluded. No analytics cookie and no persistent visitor identifier is set. The privacy policy explains the processing and your rights.

Measurement preferences

The site respects the browser Do Not Track and Global Privacy Control signals, and sends nothing when either is present. Measurement is also disabled for previews, local development and recognized automation.

Questions

For questions about browser storage or data processing, email support@offseq.com.