Data retention policy
The time period for which EastBanc Technologies must retain customer data depends on the purpose for which it is used. EastBanc Technologies must retain customer data for as long as an account is active or in accordance with the agreement(s) between EastBanc Technologies and the customer, unless EastBanc Technologies is required by law or regulation to dispose of data earlier or retain data longer.
Data archiving and removal policy
EastBanc Technologies must dispose of customer data within 30 days of a request by a current or former customer or in accordance with the Customer’s agreement(s) with EastBanc Technologies. EastBanc Technologies may retain and use data necessary for the contract such as proof of contract in order to comply with its legal obligations, resolve disputes, and enforce agreements. EastBanc Technologies hosting and service providers are responsible for ensuring the removal of data from disks allocated to EastBanc Technologies use before they are repurposed and the destruction of decommissioned hardware.
Only a limited number of EastBanc Technologies employees should have access to delete customer data.
Upon employee or contractor termination, company-owned devices will be collected and sanitized prior to device re-issuance in accordance with NIST Guidelines for Media Sanitization (NIST S.P. 800-88 Rev. 1).
Data storage policy
Personnel should be mindful of where to store data based on the degree of classification. Where possible, personnel should observe the principle of least privilege, or sharing only what absolutely needs to be known. For example, there is no need to share restricted data to persons who do not have the need to know. Personnel should be especially mindful when sharing data to external users outside of the company.
Data center location(s)
United States
Data hosting details
Cloud hosted, On premise, Private cloud
App/service has sub-processors
no