Text · page 58 of 182
Read the whole document on one page (all 182 pages, each with its own heading)
Proposal System Data Retention & Backup System backups of DASH Platform are performed on a nightly basis. Logs are backed up and rotated on a daily basis using default Linux behavior. All data is replicated instantly to our AWS RDS slave database. Slave databases are backed up on a nightly basis through AWS snapshots. We do not automatically purge data within the database. We also acknowledge that all data related to your organization remains the property of your organization. Upon termination of the contract, a database backup will be provided upon request and all data backups will be deleted and destroyed (per our Data Destruction Policy) upon request. We will not share or sell your organization’s data to any entity. We do however reserve the right to use anonymized, aggregated data (gathered across multiple customers and databases to preserve anonymity) in any capacity Security & Privacy DASH Platform treats data security very seriously. All data is encrypted in transit and sensitive data is encrypted at rest. The following policies and procedures are in place to make sure that all data is protected using industry standards and are applicable to customers’ private data and PII. • Information Security Policy – Overarching system security guidelines. • Disaster Recovery Plan – Processes by which data can be recovered and new servers and hardware can be instantiated in the cloud. • Data & Security Access Policy – Who can access data and for how long. • Data Retention Policy / Data Backup Policy – How data is preserved and safeguarded and for how long. • Data Destruction Policy – How data is deleted and hardware decommissioned. • Vulnerability Management Policy – How known vulnerability patches are applied and when. • Sensitive Data Policy – What is sensitive data. What is PII. How should it be managed. PCI Compliance DASH Platform along with our processing partner, DaySmart Payments (via Stripe), meet PCI Data Security Standards and we will provide proof of compliance upon request. Americans with Disabilities Act (ADA) DASH Platform is ADA Compliant (we meet requirements on VPAT 2.5 and WCAG 2.2). The full report can be provided to you upon request. Dash Platform, LLC https://www.dashplatform.com 7 312 S. State Street, Fl. 2 (800) 881-6515 Ann Arbor, MI 48104 Page 58 of 182