SQUIZIFY PTY LTD – PRIVACY POLICY

At Squizify, the security of our customers’ data is our highest priority. Our platform leverages
the robust infrastructure and comprehensive security features of Amazon Web Services
(AWS) to ensure your data is protected. Here’s an overview of the measures we take to keep
your information secure:

1. AWS Security

We host our platform on Amazon Web Services (AWS), which provides a secure and
resilient environment. AWS’s data centres and infrastructure are certified for compliance
with various global standards and regulations, including:

• ISO 27001
• SOC 1, SOC 2, and SOC 3
• GDPR
• HIPAA

2. Data Encryption

• At Rest: All customer data is encrypted using AES-256 encryption.
• In Transit: Data is protected using Transport Layer Security (TLS) to ensure secure
  transmission between your devices and our servers.

3. Access Control

• Role-Based Access Control (RBAC): We implement role-based access control to
  ensure that only authorized personnel can access sensitive data.
• Multi-Factor Authentication (MFA): MFA is enforced for accessing our
  administrative interfaces to add an extra layer of security.

4. Network Security

• Firewalls: We utilize AWS Security Groups and Network ACLs to control inbound
  and outbound traffic to our servers.
• DDoS Protection: AWS Shield provides advanced threat protection against
  Distributed Denial of Service (DDoS) attacks.

5. Regular Audits and Assessments

• Penetration Testing: Regular penetration tests are conducted by third-party security
  experts to identify and address vulnerabilities.
• Vulnerability Management: We continuously monitor for vulnerabilities and apply
  patches promptly to keep our systems secure.

6. Data Backup and Recovery

• Automated Backups: Our system performs automated backups of all critical data
  daily.
• Disaster Recovery: We have a comprehensive disaster recovery plan in place to
  ensure business continuity and data recovery in case of an incident.

7. Compliance

We adhere to industry standards and regulatory requirements to ensure our platform meets
the highest security benchmarks. Our compliance efforts include regular reviews and updates
to our security policies and practices.

8. User Security Best Practices

We encourage our users to take proactive steps to secure their accounts:

• Use Strong Passwords: Create complex passwords and update them regularly.
• Enable MFA: Activate multi-factor authentication for an additional layer of security.
• Monitor Account Activity: Regularly review account activity and immediately
  report any suspicious behavior.

9. Security Incident Response

In the event of a security incident, our dedicated incident response team is prepared to act
swiftly. We have established protocols to minimize impact, investigate thoroughly, and
communicate transparently with affected parties.

---

Contact Us

If you have any questions or concerns about security, please contact our security team at
support@squizify.com.
At Squizify, we are committed to maintaining the highest standards of security to protect
your data and ensure your peace of mind.