Cookie policy
Last updated 3 September 2026
ISMS Workspace uses a small number of cookies and browser storage entries. They exist to sign you in and keep the workspace secure — we do not use advertising or cross-site tracking cookies.
What we set
- Session storage — your authentication session and refresh token are held in your browser so you stay signed in between pages. Clearing them signs you out.
- Multi-factor state — a record of whether your current session has passed its authenticator check.
- Sign-in flow values — short-lived values used while completing a password reset or a Google sign-in redirect.
Analytics and advertising
We do not set advertising cookies, and we do not share browsing behaviour with third-party advertising networks.
Third parties
Signing in with Google sends you to Google, which may set its own cookies under its own policy. Our hosting and authentication providers may set strictly necessary cookies to route and secure requests.
Managing cookies
You can clear or block cookies and site data in your browser settings. Because the entries above are strictly necessary, blocking them will prevent you from signing in or staying signed in to the workspace.