Mandate ID is a product of Qyli Cyber Ltd, United Kingdom. Questions: hello@mandate-id.com
Qyli Cyber Ltd ("we", "us") operates mandate-id.com. This notice explains what we do with personal data. We keep it minimal on purpose.
To reply to your message and deal with your enquiry, run a pilot you have asked for, keep you updated if you request it, and operate the organisation you created — signing you in, sending the alerts you configured, and keeping the service secure. For the contact form, our lawful basis is our legitimate interests in responding to people who get in touch and in preventing abuse of the form. For the platform, it is the contract we have with you when you use it; for updates you ask for, your consent. You can object to a legitimate-interests use at any time.
Contact-form messages live only in our mailbox, kept as long as needed to deal with the enquiry and then cleared; they are never written to the platform. Otherwise, only as long as needed to deal with your enquiry or pilot, for as long as your organisation exists on the platform, and any period we are legally required to retain it. Unconfirmed sign-ups are discarded after 24 hours. You can delete your organisation yourself from its settings, or ask us to, at any time. When an organisation is deleted, its data and every record held for it are removed. We retain one thing: a minimal note that the organisation existed and was deleted — its name, the email address of the person who created or deleted it, and the dates — kept to prevent abuse and so we can show the deletion was carried out. It contains nothing else from the organisation.
Under UK GDPR you can ask to access, correct, delete, or restrict use of your personal data, and to object to processing. Email privacy@mandate-id.com and we will action it. You may also complain to the UK Information Commissioner's Office (ico.org.uk).
We do not sell personal data. We use a small number of reputable service providers who process data on our behalf under contract:
By using this website, or creating or using an organisation on the Mandate ID platform, you agree to these terms.
Mandate ID is an early prototype provided for evaluation. It is offered on an "as is" and "as available" basis, without warranties of any kind. It is not yet independently security-tested, and should not be relied upon to protect business-critical systems or connected to sensitive production data until we tell you it is ready for that.
Use the platform for legitimate evaluation only. Do not attempt to disrupt the service for other users, do not try to reach another organisation's data, and do not upload real personal or confidential data into an evaluation organisation. The free tier allows five active agents; we may remove organisations that are inactive for a long period, after telling you. Good-faith security testing is welcome — see the Security section for how to report findings.
Mandate ID, the Mandate ID and Qyli Cyber names and logos, and the platform's design and code are owned by Qyli Cyber Ltd. Evaluation access does not transfer any ownership.
To the fullest extent permitted by law, Qyli Cyber Ltd is not liable for any loss arising from use of an evaluation prototype. Nothing in these terms limits liability that cannot be limited by law.
These terms are governed by the laws of England and Wales.
We build Mandate ID as a security product, and we would rather be straight about where we are than overclaim. Here is the honest posture.
An independent penetration test, and formal assurance appropriate to our customers (for example Cyber Essentials Plus, and SOC 2 as we grow) are on the near-term roadmap. We will not claim certifications we do not hold.
If you find a security issue — in the demo or anywhere in Mandate ID — we want to hear about it. Email privacy@mandate-id.com with the details. Please give us a reasonable chance to fix it before disclosing publicly, and do not access or alter data that is not yours. We are grateful for good-faith reports.