Cookie notice

Last technical review: 13 September 2026.

1. Technical cookies The portal uses first-party cookies for authentication and security. No advertising or profiling cookies, analytics, local storage or session storage writes were detected on marketing pages, sign-in and portal entry checked on 13 September 2026. Required scripts, fonts and images are served locally.

2. Names, purposes and duration .CertivaDoc31.Identity: maintains authentication and roles. Without Remember me it is a session cookie; with Remember me it may persist until ticket expiry, normally 14 days in the current configuration, renewable during use. Signing out ends the authenticated session. .AspNetCore.Antiforgery.*: protects forms against forged requests; it is session-based and has a variable suffix. Identity.StatusMessage: holds a temporary account-area message for up to 5 seconds and is deleted when read. Identity external authentication or two-factor procedures, if used, may require technical cookies .AspNetCore.Identity.External, .AspNetCore.Identity.TwoFactorUserId and .AspNetCore.Identity.TwoFactorRememberMe; these paths were not activated in ordinary testing. Their duration must be inventoried before those paths are enabled. Authentication and protection cookies are HttpOnly. The local network review website uses HTTP; public release must use HTTPS.

3. Management These technical cookies alone do not require a consent banner. You can delete or block them in your browser; blocking may prevent authentication and form operations. Browser closure may be affected by session restoration. Deleting cookies does not delete documents from the server.

4. External services The CertivaLab website link is activated at the visitor's choice. Adobe OCR and optional OpenAI analysis operate server-side and are not cookies: their processing is described on the Privacy page. Before introducing non-essential tools, assess them, update this notice and manage consent where required.