medicaldevicepentest.com

Security testing evidence for the device file

Scope an engagement

Privacy policy

Updated

Operator and scope

medicaldevicepentest.com is a reference site operated by SEQ SIA (OffSeq), registration number 40203410806, Lastādijas iela 12 k-3, Riga, LV-1050, Latvia. The site has no user accounts, no newsletter, no contact form and no comments.

The evidence file builder

The characteristics you select in the evidence file builder are processed entirely in your browser. The selection is held in page memory only: the application does not write it to local storage or session storage, does not send it to OffSeq, does not include it in analytics events and does not add it to outbound links. Reloading the page returns the builder to its default state. It is an educational tool and does not inspect your device, your documentation or your infrastructure.

Technical requests and traffic measurement

Serving a page through Cloudflare involves technical request data, including an IP address, browser headers, the requested URL and the request time. These data support delivery, security and operation of the site.

The site sends page views and clicks on OffSeq service and contact links to our self-hosted Plausible service at in.ainalytic.net. Events include the site domain, the public page address, limited campaign parameters and the referring site’s origin when available. A link-click event adds only the destination path and a static placement label, such as header, hero or guide. Builder selections and results are never sent. The application does not set analytics cookies or a persistent visitor identifier; the collector receives technical network information with the request. Cookieless measurement still involves data processing.

Measurement is disabled when the browser signals Do Not Track or Global Privacy Control, or when this site’s local-storage preference plausible_ignore is true. It is also disabled for previews, local development and recognised automation. OffSeq links may carry static referral labels identifying the resource and the link placement; these labels never contain builder selections.

We use technical request data to operate and secure the site, and page-view and link-click statistics to understand which parts of the reference are used and whether readers are interested in OffSeq services. The operator’s stated legal basis for these purposes is legitimate interests under Article 6(1)(f) GDPR. Hosting and infrastructure providers process requests on our behalf; the analytics service is self-hosted. Data are kept only as long as needed for those purposes and for applicable legal obligations. The operator’s privacy policy explains its retention criteria, providers and transfer safeguards.

If you email support@offseq.com, we receive the address, the message and anything you choose to include, so that we can respond. Correspondence is retained while needed to handle the enquiry or the business relationship. OffSeq service links and the primary sources cited throughout this site take you to other sites with their own privacy notices.

Your rights

Subject to the conditions in the GDPR, you may request access, correction, deletion, restriction or portability, and you may object to processing. Contact support@offseq.com. You may also complain to Latvia’s Data State Inspectorate or to the supervisory authority where you live or work. See the cookie and browser-storage notice for what this site stores in your browser.