PIPEDA

xMatters makes sure that client personal data is processed in a manner that ensures industry-standard security of personal data. xMatters stores and processes all client data in Google Cloud Platform (GCP) datacenters and utilizes GCP’s industry leading security services. xMatters protects client data against unauthorized or unlawful processing and against accidental loss, destruction or damage. xMatters has a designated Privacy-Security Officer. xMatters conducts annual (security and privacy) reviews of our processors and suppliers. xMatters also conducts annual reviews of our own processes and data assessments (including Data Privacy Impact Assessments).

Client data collected by xMatters is for specified, explicit and legitimate purposes, which depends on client’s Business and Use case. All client provided data is used for service delivery as per contracted terms and agreements to facilitate emergency communications.

xMatters collects explicit consent from its clients for the use, processing and storage of user’s personal information.

xMatters basic requirement for it’s SaaS service are: First Name, Last Name and E-mail address. Anything additional provided to xMatters SaaS is by the choice of the user.

xMatters does not ‘share’ or ‘sell’ any data. All client provided data is used for service delivery as per contracted terms and agreements. Any data transferred to suppliers is done so as a part of xMatters service delivery. Suppliers are bound by contractual agreements to process data for xMatters only for xMatters business needs. xMatters data retention is a contractual value and needs to be mentioned in contractual agreements and agreed by both parties. Once a contract is terminated, all client data is purged within 60 days (depending upon contractual terms).

xMatters provides all clients with complete control over their own data. All clients have a Web Based User Interface (WebUI) access to xMatters SaaS for control and data entry, deletion and modification. xMatters has no control over the accuracy of client data inputted into the system.

xMatters has implemented industry leading safeguard to protect its own and users data. All user data resides in Google Cloud Platform (GCP) datacenters. GCP is a very robust, redundant and fault tolerant network infrastructure that provides many privacy and security features that are in alignment and certified against national and international standards and frameworks.

xMatters also conducts the following at the organizational level to better maintain and improve safeguards:

Data governance training
Annual security awareness
Access control audits
Encryption (at rest and in transit)

We keep our clients informed on how, when and what data is used to perform our services. xMatters Privacy Notice, Security and Privacy articles and whitepapers ensure clients are up to date with our data governance processes.

xMatters provides all clients with complete control over their own data. All clients have a Web Based User Interface (WebUI) access to xMatters SaaS for control and data entry, deletion and modification. xMatters also has implemented Subject Access Request (SAR) procedure concerning the right for subject access. This provides the an individual (data subject) the right to obtain confirmation as to whether or not personal their personal data is being processed, and to access that data.

xMatters has undergone independent third-party audit to make sure we comply with major privacy regulations. This information can also be found on our Privacy webpage.