Security Compliance

Information Security Measures

We employ industry-leading technical safeguards to protect your information, including but not limited to:

• Secure Sockets Layer (SSL) encryption to ensure all data transmitted between your browser and our servers remains private.
• Firewalls and network-level protections to block unauthorized access.
• Role-based access control (RBAC) to restrict internal data access to only authorized personnel.
• Multi-factor authentication (MFA) for administrative access.
• Data minimization protocols to ensure we only collect what’s necessary for your experience.
• All user data is encrypted both in transit and at rest using advanced encryption standards (AES-256 or equivalent).

Application-Level Safeguards

Secure Account Management

Passwords are hashed using bcrypt or a similarly secure hashing algorithm. We do not store plaintext passwords.

Session Management

Timeouts and auto-logout protocols are in place to prevent unauthorized session hijacking.

Data Segmentation

Relationship profiles and diagnostic reports are isolated and uniquely indexed to protect identity and results.

Hosting & Infrastructure

Our systems are hosted on ISO 27001-certified, GDPR-compliant cloud infrastructure providers with robust physical and virtual security standards. All data is stored in data centers located in jurisdictions compliant with international data protection regulations (e.g., EEA, UK, US with DPF compliance).

We conduct routine infrastructure monitoring and maintain 99.9%+ uptime through redundancy and load-balancing architecture.

Third-Party Compliance

INSynQIQ™ uses select third-party services (e.g., analytics, payment processors, cloud storage) which are vetted for:

• Security certifications (ISO 27001, SOC 2 Type II, etc.)
• Privacy policies in line with GDPR and CCPA
• Data Processing Agreements (DPAs) where required

We do not sell or monetize your data - ever.

Regulatory Compliance

INSynQIQ™ is designed with global regulatory frameworks in mind, including:

• General Data Protection Regulation (GDPR) – European Union
• UK Data Protection Act 2018
• California Consumer Privacy Act (CCPA)
• ePrivacy Directive & future ePrivacy Regulation

We continuously review our policies and systems to align with evolving legal standards.

Reporting & Incident Response

In the event of a data breach or system vulnerability, we will notify affected users and relevant authorities in accordance with applicable law. Our incident response protocol includes:

• Immediate breach containment
• Forensic investigation
• 72-hour notification window (per GDPR)
• Transparent user communication

If you become aware of a vulnerability or concern, please contact our security team at: security@insynqiq.io

Ongoing Auditing & Monitoring

• Regular penetration testing and vulnerability assessments
• Logging of all access attempts and critical platform events
• Internal compliance checks and training for our team
• Third-party audits and legal reviews as required

Your Responsibility

While we do our utmost to secure the platform, your role matters too.
We encourage you to:

• Use strong, unique passwords
• Keep your login credentials confidential
• Log out when using shared devices
• Report suspicious activity immediately

Contact Us

For more information on our security practices or to request detailed technical documentation, contact: compliance@insynqiq.io