Log In Book a Demo

Audit Aware Cookie Policy

Last updated October 27, 2026

Introduction

This Cookie Policy explains how Reason Consulting Corporation ("Reason," "we," "us," or "our") uses cookies and similar technologies when you visit the public pages of https://www.auditaware.com (the "Website") or sign in to the Audit Aware application (the "Application"). It explains what these technologies are, why we use them, and the choices you have about them.

This Cookie Policy should be read together with the Audit Aware Privacy Policy, which describes more generally how we collect, use, and protect personal information. Where the Application is used by a government entity under an ordering document with Reason, that ordering document and the Audit Aware Terms and Conditions govern the entity's use of the Services, and this Cookie Policy describes only the cookies and similar technologies set through your browser. The analytics cookies and the session-recording technology described below are used on the public pages of the Website only, and only after you accept them. No third-party analytics, tag-management, session-replay, or advertising script runs within the signed-in Application, and no Customer Data or record identifier is transmitted to any analytics provider.

What Are Cookies

Cookies are small text files that a website places on your computer or mobile device when you visit it. They are widely used to make websites work, to make them work more efficiently, and to provide information to the operators of the website.

Cookies set by the website owner are called first-party cookies. In the case of the Website and the Application, first-party cookies are set by Reason or by the Application on the auditaware.com domain. Cookies set by parties other than the website owner are called third-party cookies. Third-party cookies enable features or functionality provided by another company, such as analytics, to be delivered on or through the Website. The company that sets a third-party cookie can recognize your device both when it visits the Website and when it visits certain other websites.

Cookies can be either session cookies or persistent cookies. Session cookies last only until you close your browser. Persistent cookies remain on your device for a set period, or until you delete them, so that the website can recognize your device on a later visit.

Why Do We Use Cookies

We use first-party and third-party cookies for several reasons. Some cookies are required for technical reasons in order for the Website and the Application to operate, and in particular for the Application to keep you signed in and to protect your session. We refer to these as essential cookies.

Other cookies help us understand how visitors use and interact with the public pages of the Website so that we can improve them. We refer to these as analytics cookies. Analytics cookies are optional and are set only if you accept them, as described under How Can I Control Cookies. Neither the Website nor the Application uses cookies for advertising purposes, as described further below.

Essential Website Cookies

Essential cookies are strictly necessary to provide you with services available through the Website and to use some of its features, such as signing in to the Audit Aware application and submitting forms securely. These are first-party cookies set by the Audit Aware application to keep you signed in and to protect forms against cross-site request forgery. Because they are necessary for the Website to function, they are set whenever you use the affected features and cannot be refused without affecting how the Website works.

The Application sets the following essential cookies.

  • Name: Session and authentication cookie. Provider: www.auditaware.com. Service: Audit Aware application. Purpose: Identifies your signed-in session so that you remain authenticated as you move between pages and so that your access is limited to the records your organization has authorized. Expires in: Session, or at the end of the inactivity period your organization has configured.
  • Name: Cross-site request forgery token. Provider: www.auditaware.com. Service: Audit Aware application. Purpose: Stores a unique token that is checked when you submit a form or take an action in the application, so that requests originating from another website cannot be carried out under your session. Expires in: Session.

The authenticated Audit Aware application requires essential cookies and cannot be used with them disabled. If you block or delete essential cookies, you will be signed out and will not be able to sign in again until your browser accepts them.

Analytics Cookies

These cookies collect information that helps us understand how the public pages of the Website are used and how effective our content is, so that we can improve the Website for visitors. The Website uses two services for this purpose: Google Analytics, a service provided by Google LLC, and Lucky Orange, a service provided by Lucky Orange LLC. Neither service is loaded, and none of the cookies listed in this section is set, unless you select "Accept" in the cookie banner. Google Analytics uses cookies to distinguish visitors and to record information such as the pages you view, how you arrived at the Website, the approximate region you are visiting from, and the type of device and browser you are using.

Google Analytics cookies are set on the auditaware.com domain but the data they collect is processed by Google on our behalf. Google Analytics is configured so that it is not used to build advertising profiles of Website visitors and does not receive names, email addresses, or other directly identifying information from us. You can learn more about how Google uses information from sites that use its services at https://policies.google.com/technologies/partner-sites.

  • Name: _ga. Provider: www.auditaware.com. Service: Google Analytics. Purpose: Records a unique identifier that is used to distinguish individual visitors so that visits and sessions can be counted. Expires in: 1 year 1 month.
  • Name: _ga_ followed by the property identifier. Provider: www.auditaware.com. Service: Google Analytics. Purpose: Persists the state of the current session for the Google Analytics property associated with the Website, including whether the session is new and the number of interactions in it. Expires in: 1 year 1 month.

Lucky Orange records how visitors interact with the public pages of the Website, such as mouse movements, clicks, taps, scrolling, and the pages viewed, together with the type of browser and device used and the visitor's internet protocol address, from which Lucky Orange derives an approximate region. We use this information to view session recordings, which replay how a visit to the Website unfolded, and heatmaps, which show in aggregate where visitors click and how far they scroll, so that we can find and fix parts of the Website that are confusing or do not work as intended. We configure Lucky Orange to mask the text you type into form fields on the Website, so that what you enter in a form is not captured in a recording; information you choose to submit through a form reaches us through the form itself, as described in our Privacy Policy.

Lucky Orange cookies are set on the auditaware.com domain, and the information Lucky Orange collects is processed by Lucky Orange on our behalf as our service provider. We use it only to understand and improve the Website. We do not send Lucky Orange your name, email address, or other contact details, we do not connect recordings to the forms you submit or to account records, and we do not use Lucky Orange's visitor-identification features or use its data to build marketing or advertising profiles. Session recordings and heatmap data are kept for the retention period of our Lucky Orange account and are then deleted automatically. Lucky Orange is not used in the Application and receives no Customer Data. The Application is served from separate domains (sso.auditaware.app), so cookies set on the Website, including Lucky Orange cookies, are not sent to the Application, and no analytics or session-recording script is loaded by it. Lucky Orange processes this information as our processor under its data processing terms; its own privacy statement, which covers visitors to Lucky Orange's website, is at https://www.luckyorange.com/legal/privacy-policy.

  • Name: lo-uid. Provider: www.auditaware.com. Service: Lucky Orange. Purpose: Records a unique identifier that is used to distinguish individual visitors so that the visits of the same browser can be recognized in recordings and heatmaps. Expires in: 400 days in Chrome and Edge, which limit cookie lifetimes to that period; other browsers may keep it longer unless you delete it or select "Deny."
  • Name: lo-visits. Provider: www.auditaware.com. Service: Lucky Orange. Purpose: Records the visits made from your browser so that new and returning visits can be distinguished. Expires in: 400 days in Chrome and Edge, which limit cookie lifetimes to that period; other browsers may keep it longer unless you delete it or select "Deny."

Advertising Cookies

The Website does not currently use advertising cookies or pixels. We do not place cookies or similar technologies from advertising networks or social media platforms on the Website, we do not use cookies to serve advertising to you on other websites, and we do not sell or share information collected through cookies for cross-context behavioral advertising.

If we introduce advertising cookies or pixels on the Website in the future, we will update this Cookie Policy to describe them and will provide an opt-out mechanism before any such cookies or pixels are introduced.

How Can I Control Cookies

You have the right to decide whether to accept or reject cookies other than essential cookies. When you first visit the Website, a cookie banner asks whether you accept analytics cookies, including Lucky Orange session replay. Google Analytics and Lucky Orange are not loaded, and no analytics cookies are set, unless you select "Accept." If you select "Deny," the Website uses essential cookies only. You can change your choice at any time by selecting "Cookie Settings" at the bottom of any page of the Website; if you change your choice from "Accept" to "Deny," the Website removes the Google Analytics and Lucky Orange cookies and stored identifiers described in this Cookie Policy from your browser. If your browser sends a Global Privacy Control signal, the Website treats it as a choice to deny analytics cookies and does not display the banner, unless you later accept analytics cookies through Cookie Settings. If you selected "Accept" in a browser before turning on Global Privacy Control, that choice stays in effect until you select "Deny" in Cookie Settings. Changing your choice to "Deny" stops further collection but does not delete recordings or analytics data already collected, which are deleted at the end of the retention period set in our Google Analytics or Lucky Orange account; to ask us to delete them sooner, contact us at contact@reason.consulting. Your choice is stored in your browser, so it applies only to the browser and device on which you made it, and you will be asked again if you clear your browser's storage.

You can also control cookies through your browser settings.

Most web browsers allow you to control cookies through their settings. You can typically set your browser to refuse all cookies, to refuse third-party cookies only, to alert you when a cookie is being set, or to delete cookies that have already been placed. The method for doing so varies by browser and is described in the help pages of the browser you use. The following links point to the cookie controls for common browsers.

  • Google Chrome at https://support.google.com/chrome/answer/95647.
  • Mozilla Firefox at https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop.
  • Apple Safari at https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac.
  • Microsoft Edge at https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09.

If you choose to reject cookies through your browser, you may still use the public pages of the Website, although some features may not function as intended. As noted above, the authenticated Audit Aware application requires essential cookies and cannot be used if they are disabled.

To opt out of Google Analytics across all websites you visit, you can install the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout. The add-on prevents the Google Analytics script from sharing information about your visits with Google.

Other Tracking Technologies

Cookies are not the only way to recognize or track visitors to a website, and this section describes the other technologies that are relevant to the Website and the Application.

The public pages of the Website include Google Analytics and Lucky Orange tracking code that uses small pieces of JavaScript to record the page views, events, and interactions described above. This code is loaded only after you accept analytics cookies, performs the same function as the analytics cookies described in this Cookie Policy, and is governed by the same choices. It is not included in the Application.

Lucky Orange also stores a visitor identifier and a session identifier in your browser's local storage, under the names lo-visitor and lo-session, which serve the same purposes as the Lucky Orange cookies described above. They are stored only after you accept analytics cookies, have no fixed expiry, and remain until you clear your browser's site data or select "Deny."

We do not use web beacons, tracking pixels, or similar technologies in the emails we send about Audit Aware.

Some browsers offer a Do Not Track signal that requests websites not to track your browsing across sites. Because there is no industry standard for how websites should respond to Do Not Track signals, the Website does not currently respond to them. The Website does not, however, engage in cross-site advertising tracking, the analytics cookies described above can be controlled through the cookie banner, Cookie Settings, browser settings, and opt-out add-on described in this Cookie Policy, and the Website honors the Global Privacy Control signal as described under How Can I Control Cookies.

How Often Will We Update This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes to the cookies we use or for other operational, legal, or regulatory reasons. We review the cookies set by the Website and the Application periodically and revise the lists above to match what is actually set.

The date at the top of this Cookie Policy indicates when it was last updated. Please revisit this Cookie Policy regularly to stay informed about our use of cookies and related technologies. For a customer with a paid subscription or an ordering document, a material change to this Cookie Policy applies on the same notice and with the same renewal-term protection that the Terms and Conditions provide for amendments to the Terms.

Contact Us

If you have any questions about our use of cookies or other technologies, please contact us using the details below.

Reason Consulting Corporation, 2820 Selwyn Ave, STE 856, Charlotte, NC 28209, United States; email contact@reason.consulting.