Privacy

What we do with your documents and your details

Critical Risk Designer is provided by Orana Skills Centre, ABN 78 674 804 221, of Suite 2, First Floor, 31-37 Macquarie Street, Dubbo NSW 2830. This page covers Orana Audit at audit.oranaskillscentre.com and Critical Risk Designer at criticalriskdesigner.com, which are the same system under two names.

Last updated 21 September 2026.

What we collect

The documents you upload for audit, review or update. An email address, so we can send the result and so you can sign in. Whatever you tell us while scoping an order: your organisation, site, department, industry, state or territory, and the work the document covers. If you pay by card, Stripe collects and holds the card details and we never see them.

We set one cookie, osc_session. It holds a random session identifier, nothing about you, cannot be read by JavaScript, and lasts thirty days. There is no analytics, no advertising pixel and no third party tracking on either site.

What we do with your documents

We use your document to produce the audit, review or update you asked for, and we keep it so your library keeps working. We do not publish it, sell it, or show it to other customers. Each customer’s documents sit in their own workspace and a job is only ever given one workspace to read.

We do not use your documents to train any model of our own, and our agreement with Anthropic does not permit them to train on what we send either.

Who else handles your information

Producing an audit means sending the text of your document to a provider that reads it. We use these, and no others, for the parts of the service they are named against:

• Anthropic, who make the Claude models, receive the text of your document and the obligations it is tested against, and return the findings.
• Vercel host the site and hold uploaded documents and finished reports in a private store.
• Upstash hold the order, account and library records.
• Stripe take card payments. Card details go to Stripe and not to us.
• Google carry the email we send you, including any report attached to it.

Each of them handles your information under their own terms and privacy policies. If a procurement process needs those terms, or needs us to answer a supplier questionnaire, call 1800 231 173 and we will work through it with you before you upload anything.

Where your information is held

Outside Australia. The documents you upload and the reports produced from them are held on Vercel infrastructure in the United States, and the audit itself is carried out by Anthropic, also in the United States.

If your organisation requires its information to stay in Australia, we cannot offer that today. It is worth raising with us before you place an order rather than after, and we would rather tell you now than have you find out during a procurement review.

How long we keep it

We keep your documents, the reports produced from them, and your order records for as long as you hold an account with us, so that your document library and its version history stay complete.

You can take anything out of your library yourself, and you choose what that means. Remove from my library tidies the list and leaves the file in our storage, so we can put it back if you want it again. Remove and delete the file destroys our copy there and then. We cannot recover it afterwards and neither can you, so use it when that is what you want.

Either way the record that the order happened stays, because you paid for it or it counted against a pass, and quietly erasing that would be wrong.

If you would rather we did it, or you want everything on your account removed, email info@oranaskillscentre.com or call 1800 231 173 and we will do it and confirm when it is done.

Keeping it safe

Uploaded documents and finished reports are held in private storage. Their storage addresses are not public and cannot be opened in a browser: downloads come back through the site, which checks the document belongs to the person asking before it sends it. Signing in is by a single use link sent to your email address, and we do not hold passwords.

If you order a free audit without creating an account, the report is attached to the email we send you. Email is not secure transport, so if that matters for the document in question, create an account and collect it from your library instead.

No system is perfect. If something goes wrong in a way that affects your information, we will tell you.

Getting access, corrections and removal

You can ask us what we hold about you, ask us to correct it, ask for a copy, or ask us to delete a document. Email info@oranaskillscentre.com or call 1800 231 173. We will ask you to confirm who you are before we act on a request about an account, because the request might not be from you.

If you are not happy

Tell us first, on 1800 231 173 or at info@oranaskillscentre.com, and we will look into it and come back to you. If you are not satisfied with how we handle it, you can take a privacy complaint to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change how any of this works, we will change this page and update the date at the top. If the change is significant and affects documents you already hold with us, we will email you rather than leaving you to notice.