Security and data policies

The policies

• Information Security PolicyHow Cerqular Inc. protects the data it holds: the controls that run today, the controls that are not yet in place, and who is responsible.
• Access Control PolicyWho can reach Cerqular data and how that access is limited and recorded: account isolation, stored connection keys, and the staff audit log.
• Endpoint Protection PolicyHow Cerqular Inc. protects the company devices used to access customer data: built-in protection, disk encryption, multi-factor authentication and malware reporting.
• Incident Response PolicyHow Cerqular Inc. handles a security incident today. A written incident response plan is not yet in place.
• Data Classification PolicyThe four classes Cerqular Inc. sorts data into and how each class is handled, using only the controls that run today.
• Vulnerability Management PolicyHow Cerqular Inc. receives and handles reports of security vulnerabilities, and the scanning and testing that are not yet in place.
• Data Protection PolicyHow Cerqular Inc. handles personal data: what we collect, who processes it, how long we keep it, your rights, and the roles that are not yet in place.
• Breach Notification PolicyHow and when Cerqular Inc. tells people and authorities about a personal data breach. A written incident response plan is not yet in place.

Related pages

See also the Privacy Policy, the Terms of Service, the Data Processing summary, the Cookie Policy and the Trust page. Security reports go to security@cerqular.ai.

Status of this text

Counsel review of this policy has not been completed. It states what the code and the infrastructure do today, and where a control is not yet in place it says so.