Data handling and security
Security copy must describe controls that Emerge Global Solutions can prove. Buyers should be able to trace each statement to technical documentation, a contract, an audit, or an accountable owner.
Storage & Transfer
Encryption protocols, key ownership, upload methods, and download-link controls are documented.
Identity & Access
Provisioning, multi-factor authentication, role permissions, and access reviews are documented.
Retention & Deletion
Default retention for each record type is published, with a deletion-request and confirmation process.
01Project Data Inventory
Identify target specifications, account files, CRM exports, suppression records, samples, working files, final deliveries, and support communications. State the purpose and owner for each category.
02Identity and Access
Document account provisioning, multi-factor authentication, role permissions, privileged access, approval, access reviews, logging, employee onboarding, and offboarding. Name which functions can access raw client records.
03Storage and Transfer
Files move through an agreed secure method with expiring download links and passwords sent separately. Encryption, backups, and data locations are confirmed in your project terms.
04Retention and Deletion
Retention periods for source, working, delivered, and backup records are set per project. On request we delete your data and confirm in writing, subject to legal holds and backup expiry.
05Security Events
Describe reporting, triage, containment, investigation, recovery, notification, and corrective action. Any stated notification deadline must match contracts and applicable law.
06Report a Concern
Contact security@emergeglobalsolutions.com with a concise description. Do not include live credentials, exploit payloads, or unnecessary personal records in the first message.