Effective Date: 2024-01-01
Version: 1.3
Approved By: Mohamad Tawakol - CTO
This policy establishes the framework to protect Spare’s information assets and customer data. Our goal is to ensure data confidentiality, integrity, and availability while meeting regulatory and compliance requirements.
This policy applies to all employees, contractors, and third parties who interact with our information systems and data. It governs all data stored in our compliant cloud data centre and any systems used to process or monitor that data.
Cloud Storage
All company and customer data is stored in a cloud data center that complies with relevant industry and regulatory standards.
Data Anonymization
Except for emergency and/or direct customer support needs, all customer data is anonymized and stripped of personally identifiable information (PII).
Emergency Access
Direct access to customer data is restricted solely to the Chief Technology Officer (CTO), and such access is permitted only in emergency situations.
Limited Direct Access
CTO: has direct access to non-anonymized customer data, and this access is granted only when absolutely necessary (e.g., for emergency troubleshooting).
Customer Support Agents: only have access to limited non-anonymized customer data that is needed to support any customer queries. Each instance of this access is recorded and monitored to ensure compliance.