All Data is stored in Encrypted MongodDB Server.

We follow Zero Trust Security principles, ensuring continuous identity verification using AWS Cognito, strict least-privilege access, secure data transmission through TLS 1.3, data encryption with AES-256, network segmentation via AWS VPC, VPN to connect Prod servers and real-time monitoring using AWS CloudWatch and Dataset for enhanced security.

CloudEagle provides custom scopes to limit CloudEagle's visibility to only the necessary information.

CloudEagle will access limited employee information, including Employee Name, Department, Location, Hire Date, Termination Date, and Job Title

CloudEagle doesn't share data with any third party.

Data Retention Policy

Sometimes, CloudEagle customers may request deletion of data that belongs to them, from CloudEagle systems. This policy outlines the provisions we provide for customers to make such requests and describes how such requests are to be handled.

Scope

This policy is applicable to:

Data that is classified as Customer-classified as per the Data Classification Policy

Data that is requested to be deleted belongs to the customer making the request

Data that resides in CloudEagle systems. Specifically, data that resides in third party services that are not managed and hosted by CloudEagle are excluded from this policy

Data that resides in CloudEagle products or services that are in testing, alpha/beta state, or an early access program

Guidelines

By default, CloudEagle stores its customer's data indefinitely. For efficiency and cost reasons, it may choose to delete the customer's data at any point after the customer contract ends.

CloudEagle regularly backs up customer data per Data Backup Policy.

CloudEagle may provide the option for customers to delete data after their subscription ends. This request must be made by the customer, and CloudEagle may require additional verification to authenticate the identity of the customer making the request. CloudEagle will delete all information from currently-running production systems within a time limit specified in our CloudEagle Process Configuration.

Once deleted, a customer's data cannot be restored.

Non Compliance

CloudEagle staff who violate this policy may face repercussions in proportion to the impact of their violation. CloudEagle management will determine how serious a staff member's offense is and decide the appropriate penalty. Penalties may include

Reprimand.

Demotion.

Suspension or termination for more serious offenses.

Detraction of benefits for a definite or indefinite time.

Questions

If you have any questions regarding this policy, please reach out to: Prasanna Naik at ([email protected])

End of Data Retention Policy.

https://www.cloudeagle.ai/news/security-and-compliance

SOC 2 TYPE 2, ISO 27001.

GDPR