Enovi Solutions
Menu

Security and data handling

We work inside other companies' customer, vendor and employee records. Here is exactly how we handle them.

Draft for client review. Every statement below must be true before launch. Items marked to confirm are not yet verified.

How files reach us

We send you a secure upload link for each project. We do not accept data files as email attachments, and our forms do not accept file uploads.

Status: [CLIENT TO CONFIRM: SECURE UPLOAD TOOL CHOSEN AND TESTED END TO END]

What we ask for

Only the fields the job needs. If a column is not needed for the cleanup, we ask you to leave it out of the export.

Status: [CLIENT TO CONFIRM]

Agreements

An NDA and a data processing agreement are available on request, before you share anything.

Status: [CLIENT TO CONFIRM: NDA AND DPA TEMPLATES READY]

Where your data lives during a project

Project files are kept in [STORAGE LOCATION], with access limited to the people working on your project.

Status: [CLIENT TO CONFIRM: STORAGE AND ACCESS CONTROLS]

Deletion

At the end of each project we delete your files on the schedule written into your agreement, and confirm in writing when it is done.

Status: [CLIENT TO CONFIRM: RETENTION PERIOD]

Who does the work

[CLIENT TO CONFIRM: WHO HANDLES CLIENT DATA, TEAM SIZE, AND WHETHER ALL WORK IS DONE IN THE US]

Status: [CLIENT TO CONFIRM]

If something goes wrong

If we discover a breach involving data you gave us, we will notify you as soon as possible and no later than 10 days after we determine a breach occurred, as Florida law (section 501.171(6)) requires of third-party agents. Our incident runbook says so.

Status: [CLIENT TO CONFIRM: INCIDENT RUNBOOK WRITTEN]

Healthcare clients

Before any project that touches protected health information, a signed Business Associate Agreement must be in place. We will not claim to be "HIPAA certified"; no such certification exists.

Status: [CLIENT TO CONFIRM: BAA READY BEFORE THE FIRST HEALTHCARE CLIENT]

The free data check

The free data check runs entirely in your browser. Your file is never uploaded. If you choose to contact us afterward, only the counts from the report are sent.

Status: built and in place on this site.

Where to next