Data retention policy
Voxboard Limited shall retain data as long as the company has a need for its use, or to meet
regulatory or contractual requirements. Once data is no longer needed, it shall be securely disposed of or archived. Data owners, in consultation with legal counsel, may determine retention periods for their data. Personally identifiable information (PII) shall be deleted or de-identified as soon as it no longer has a business use.
Data archiving and removal policy
Voxboard Limited shall retain data as long as the company has a need for its use, or to meet
regulatory or contractual requirements. Once data is no longer needed, it shall be securely disposed of or archived. Data owners, in consultation with legal counsel, may determine retention periods for their data. Personally identifiable information (PII) shall be deleted or de-identified as soon as it no longer has a business use.
Data storage policy
Confidential data is subject to the following protection and handling requirements:
- Access for non-preapproved roles requires documented approval from the data owner
- Access is restricted to specific employees, roles and/or departments
- Confidential systems shall not allow unauthenticated or anonymous access
- Confidential Customer Data shall not be used or stored in non-production
systems/environments
- Confidential data shall be encrypted at rest and in transit over public networks in accordance
with the Cryptography Policy
- Mobile device hard drives containing confidential data, including laptops, shall be encrypted
- Mobile devices storing or accessing confidential data shall be protected by a log-on password
(or equivalent, such as biometric) or passcode and shall be configured to lock the screen after
five (5) minutes of non-use
- Backups shall be encrypted
- Confidential data shall not be stored on personal phones or devices or removable media
including USB drives, CD's, or DVD's
- Paper records shall be labeled "confidential" and securely stored and disposed of in a secure,
approved manner in accordance with data handling and destruction policies and procedures
- Hardcopy paper records shall only be created based on a business need and shall be avoided
whenever possible
- Hard drives and mobile devices used to store confidential information must be securely wiped
prior to disposal or physically destroyed
- Transfer of confidential data to people or entities outside the company shall only be done in
accordance with a legal contract or arrangement, and the explicit written permission of
management or the data owner.
Data center location(s)
Ireland
Data hosting details
We host our data in a PostgreSQL database hosted on AWS services.
App/service has sub-processors
no