Data Security and Privacy
Our Commitment to Privacy
Digital CFO recognizes the importance of maintaining your privacy. We value your privacy and appreciate your trust in us. The policy applies to all data, regardless of format or location, that is generated, collected, stored, processed, or transmitted by the:
- Various DigitalCFO branded applications
- Various Technology platforms used to power the above-mentioned applications
- Various types of users including customers, employees, contractors, and partners.
- By visiting and/or using our Services, you agree to this Privacy Policy.
Overview
Digital CFO recognizes the importance of maintaining your privacy. We value your privacy and appreciate your trust in us. The policy applies to all data, regardless of format or location, that is generated, collected, stored, processed, or transmitted by the:
- Various DigitalCFO branded applications
- Various Technology platforms used to power the above-mentioned applications
- Various types of users including customers, employees, contractors, and partners.
By visiting and/or using our Services, you agree to this Privacy Policy.
This document describes DigitalCFO’s Data Policy. It describes in detail, the policy of information we collect, generate, update, manage and disable.
Cookies
What is a Cookie?
Cookies are a feature of web browser (Firefox, Safari, Internet Explorer, Netscape Navigator, etc.) software that allows web servers to recognize the computer used to access a site. They are small pieces of data that are stored by a user’s web browser on one site to simplify subsequent interactions with that site by the same user or to use the information to streamline the user’s transaction on related web pages. This makes it easier for a user to move from site to site and to complete transactions over the Internet. Cookies should make your online experience easier and more personalized.
Our site utilizes cookies to collect information about how our site is used. Passive Information gathered may include the date and time of visits, the site pages viewed, time spent at our site, and the sites visited just before and just after our site. If you do not wish to transmit ‘cookie’ information about yourself, you may turn off the cookie function in your web browser; please consult the ‘Help’ section of your browser to correctly do so.
Data States
Data generated and managed by DigitalCFO branded applications follows a lifecycle as described below:
Active
Any data generated by the DigitalCFO branded applications will be of status “Active”. Such data will be stored and made available by application Database.
Inactive
Any data that is of status “Active” will be marked “Inactive” after 8 years. Such data is then stored in Long term storage.
Disabled
Any data that is of status “Active” can be deleted by the appropriate users. Such data will have status as “Disabled”. Such data will be stored in Long term storage.
Training and Awareness
Staff members receive training on data handling, privacy, and security practices every quarter. Ongoing communication and awareness programs are executed to keep employees informed about data policies, procedures, and best practices.
Information Security
Information Security
We work hard to protect our users and IDOS from unauthorized access, alteration, disclosure, or destruction of data we generate and manage. This is done as follows:
Lorem ipsum dolor sit amet, congt the off tetur adipiscing elit. Mauris iaculis nec justo frwac fermen quisque rhoncus nisi sed suscit curus. Donec porta metus porta.
Information Collection
DigitalCFO uses the information that is collected from all the applications for the following purposes:
- Deliver Functionalities of the Application
- Maintain & improve our applications
- Develop new applications and features
- Provide relevant applications and functionality
- Measure performance
- Communication with you
- Mitigate risks for all the stakeholders
Refer to the downloadable document to learn more about the technologies used for the information collection.
Information Sharing
By default, no information is shared with 3rd parties by the DigitalCFO branded applications. However, the data may be shared with 3rd parties only if users initiate the sharing under certain circumstances.
- User wants to share based on consent
- For legal reasons
- For business reasons
Information Security
We work hard to protect our users and IDOS from unauthorized access, alteration, disclosure, or destruction of data we generate and manage. This is done as follows:
1. Data access
We offer 2-factor authentication using One Time Password over SMS. This helps in authenticating and authorizing proper users to use our applications.
2. Data in Transit
Data is encrypted from source to destination to keep it private and protected while in transit. The transmission is done through a connection that is secured using SSL. All the communication is implemented as HTTPS
3. Data at Rest
All the data is stored in encrypted format. This protects the data at rest all the time.
4. Key management
The applications use a variety of secret keys. These are managed using Azure Key Vault service. Only authorized staff members have access to configure the above-mentioned service
Data office @DigitalCFO
Data Office is responsible for overseeing data governance and ensuring data integrity and security across the organization and with teams working on DigitalCFO branded applications. This office comprises of Data Head and Data Staff members.
Data Staff
Data Staff are appointed to manage and maintain the quality, accuracy, and compliance of data through out IDOS for all the applications.
Data Handling
Designated staff follows the specified data handling procedures for all the data and the formats. Data is accessed, processed, and shared only by such authorized staff members, following the principle of “least privileged”.
Data Usage and Ethics
Staff members are expected to use data ethically and responsibly, avoiding actions that could harm individuals, the organization, or its stakeholders.
Training and Awareness
Staff members receive training on data handling, privacy, and security practices every quarter. Ongoing communication and awareness programs are executed to keep employees informed about data policies, procedures, and best practices.
