Security and Privacy for Insight

Last updated: 18/04/2023

Security

Insight takes your data security and privacy seriously

We take the protection of your personal information and data very seriously and make every effort to keep your data safe from loss, unauthorized activity, or other misuse. We use the latest software, strive to apply critical security updates as necessary, work with industry best practices, and provide security training to our technical staff.

How Insight keeps your data secure

1. All data is transmitted to our systems via HTTPS encryption.
2. We only store a user's email (for logging in and sending emails for events they've subscribed to) and their full name for displaying on screen. Nothing else!
3. We do not collect any personal information or personal activity. As such we have nothing to share to others.
4. User passwords are encrypted.
5. Insight maintains a secure cloud-based infrastructure where each customer has their own private instance, ensuring no cross-customer data access by design.
6. Hosting location can be selected prior to provisioning your Insight instance from the locations made available by our hosting provider. By default we will choose the nearest available hosting location.
7. We limit staff access to production data and ensure our staff use secure authentication methods to access Insight's systems.
8. We adhere to coding best practices and all changes to Insight's software are checked by two other developers for any potential security or other issues.
9. Client Insight administrators can manage and delete user accounts, removing all information from the system that we have on that user.
10. We deploy security updates when we are aware of issues needing to be addressed, rolling them out to every instance.

Insight's Compliance with Industry Standards and Certifications

Insight is committed to complying with industry standards and certifications to ensure the security and privacy of our customers' data.

We comply with the following standards:

• GDPR

We provide the option of additional security for enterprise customers at an additional cost.

• Audit of our system by a 3rd party security vendor.

Data Retention and Deletion

Insight allows clients to control user creation and deletion. When a user is deleted, their email and full name are erased from the system. Customers have full control over all data through the admin pages.

Support and Reporting Security Issues

Insight provides a Jira Service Desk for raising issues with a link available in the app also. Our website also includes an email address and phone number for contacting our support team. If you encounter any security issues or concerns, please reach out to our team through the available channels, and we will address the issue as soon as possible.