Technical and organisational measures
Measures are scaled to the risk of the data we process. Administrative access to systems that hold personal data is limited to the smallest possible number of people, each bound to confidentiality in writing.
1. Confidentiality
- Physical access: servers run in professionally operated data centres in the EU; work devices are encrypted and locked when unattended.
- System access: key-based authentication for server administration, firewall and intrusion prevention on servers, internal services not exposed to the internet.
- Secrets: access keys are kept out of source code and rotated after any suspected exposure.
- Data access: need-to-know principle. Customer data is accessible only to the people working on that engagement and, where a customer restricts tools in writing, only through approved tools.
- Separation: data of different customers is kept apart; meeting data is filed per customer and never assigned by guesswork.
- Minimisation: meeting participants are labelled anonymously unless they consented to identification; people who asked for erasure are kept only as an irreversible code on a suppression list.
2. Integrity
- Encrypted connections (TLS) for websites and interfaces, encrypted channels for administration.
- Versioned software changes and a controlled deployment process.
- Access and error logging.
3. Availability and resilience
- Regular backups, encrypted at rest, kept in a limited rotation and checked for restorability.
- Automatic security updates and regular vulnerability checks.
- Temporary compute resources are deleted after use.
4. Review and response
- Processors are selected for their data protection guarantees and bound by data processing terms.
- Personal data breaches are assessed at once and reported to the supervisory authority and to affected customers as required by law and by the DPA.
- Erasure requests follow a documented, repeatable procedure.
- These measures are reviewed regularly and after any security incident or significant change.