How is your data used?
Is personal information collected, stored, or processed?
How is Personally Identifiable Information (PII) handled?
Is there any data masking in use within the service?
How are digital identities and credentials protected in Scout?
How is data transmitted?
How is data stored?
How long will data be stored (data retention)?
Is there a documented Data Privacy and Data Protection Policy complying with relevant data secrecy, data privacy and data protection regulations such as GDPR and CCPA?
Is a documented Information Security Incident Management procedure in place?
Are customers notified if their data is accessed by or disclosed to an unauthorized party?
In case of unauthorized customer data access or disclosure, do you provide sufficient information to support cooperation with an investigation by the Privacy Commissioner?
Is there a process to notify customers of information security incidents / business continuity incident that affects customer data or services?
Are customers notified if a formal request from authorities to access their data is made?
When would third parties, including government agencies, be allowed to access customer data?
Can you guarantee that third-party access to shared logs and resources won't reveal critical information about my organization?
How many people will have access to customer information? What is the process of giving an employee access to customer information?
How does Soroco control potential non-authorized access to customers' data?
Does Soroco document employee access to customers' data?
Do the Terms of Service or SLA require Soroco to report unauthorized access to customer data by Soroco’s employees?
