Applicable to the following Sastrify plans:

* Legacy includes all plans signed before February 29, 2024. 

At Sastrify, we take the security and privacy of our customers' data seriously. We are committed to maintaining the highest standards to ensure that your data remains secure and protected on our platform. 

To provide transparency and reassurance, we would like to highlight some of the key measures Sastrify has in place, in line with our GDPR and SOC2 compliance requirements:

• Data Encryption: All data transmitted between your systems and our platform is encrypted using industry-standard protocols. Additionally, data at rest is encrypted to safeguard information stored within our infrastructure.
  
  

• Access Controls: We implement robust access controls, ensuring that only authorized personnel have access to your data. Our role-based access control (RBAC) mechanisms are designed to limit access to the minimum necessary for employees to perform their job functions.
  
  

• Regular Audits and Monitoring: We conduct regular internal and external audits to assess and enhance our security posture. Continuous monitoring helps us identify and respond promptly to any suspicious activities, ensuring the integrity and confidentiality of your data.
  
  

• Data Residency and Storage: Your data is stored in secure, compliant data centers, with strict measures to ensure data residency requirements are met. We carefully choose reputable hosting providers with a proven track record in maintaining high security standards.
  
  

• Incident Response and Notification: In the event of a security incident, we have a well-defined incident response plan in place. We commit to promptly notifying you of any incidents that may impact the security or privacy of your data, as required by GDPR.
  
  

• Employee Training and Awareness: Our employees undergo regular training on data security best practices, including GDPR and SOC2 compliance requirements. This ensures that everyone involved in handling your data is well-versed in maintaining its confidentiality and integrity.

Sastrify recognizes that protecting our customers' information is a shared responsibility and we are committed to being a trusted custodian of the information you entrust to us. 

If you have any specific questions, or if there are additional measures you would like to know more about, please email us at privacy@sastrify.com. We are here to help and provide you with the information you need to feel confident in our platform.