Privacy Policy | SOC.ai

Introduction

SOC.ai for SOC Managers is a comprehensive, secure, and highly specialized platform designed exclusively for our customers to manage their security operations. The app provides real-time alerts, event monitoring, and insightful data tailored specifically to each customer’s environment. This document outlines the content rights, permissions, and data handling practices of SOC.ai for SOC Managers, ensuring transparency and compliance with relevant privacy and intellectual property laws.

The platform is built to offer robust functionality while maintaining a strict security model that allows only authorized users to access data relevant to their environment. Our approach focuses on privacy, data integrity, and user control, ensuring customers have the tools to efficiently monitor and respond to critical security events.

1. Content Ownership and Control

The content available within SOC.ai for SOC Managers is entirely owned and controlled by the respective customers. We take data ownership very seriously and ensure that each customer's information remains private and secure. Key points related to content ownership are as follows:

• Exclusive Customer Data: All data shown in the app, including security alerts, event logs, and related information, is specific to the customer's account and infrastructure. Customers have full ownership and control over their data and can rest assured that their data is not accessible by other parties.
• Data Privacy and Integrity: We adhere to best practices to protect the integrity of customer data. All customer data is processed within the application, and no third-party external storage or sharing occurs unless explicitly authorized by the customer.
• Security and Access Control: Each user within the platform is granted access based on the principle of least privilege, ensuring users only have access to the data they are authorized to view. No cross-customer data access is permitted, ensuring full isolation of each customer's data.

2. Permissions and Functional Limitations

SOC.ai for SOC Managers follows a strict read-only model for users, ensuring a secure environment where actions that could affect the system’s integrity are prohibited. This approach offers several functional limitations to maintain security, which are as follows:

• Read-Only Access: Users are only able to view security alerts, events, and notifications. No data modification, deletion, or alteration is allowed. This ensures that the environment remains secure and that users cannot unintentionally or maliciously alter their operational settings.
• No Remote Command Execution: Users cannot execute remote commands or make any changes that could impact the customer's environment or security infrastructure. This reduces the risk of errors or malicious activities while using the app.
• Virtual Assistant Interaction: The app includes a virtual assistant powered by AI to help users interact with the system. The virtual assistant can assist with queries regarding security events, alert management, and system configuration, but cannot make any changes to the environment.

3. User-Generated Content (UGC)

SOC.ai for SOC Managers does not facilitate traditional user-generated content (UGC) such as file uploads, social media posts, or content sharing. However, the app does feature an AI-powered chat interface that enables users to interact with the system for various support needs:

• Interactive Chat Interface: Users can engage with the virtual assistant to receive tailored advice, answer questions, or troubleshoot security-related matters. These interactions help users quickly resolve issues and better understand system events.
• No Data Sharing or Storage: All user interactions with the chat interface are processed for the purpose of providing immediate assistance. None of the content created in this manner is shared externally or stored permanently. User inputs are transient and are not used for any purposes beyond their immediate context.
• No Content Sharing: The app does not permit users to share any content, data, or information outside of the platform, ensuring that all interactions remain within the confines of their secure environment.

4. Privacy Policy

This Privacy Policy explains how SOC.ai for SOC Managers collects, uses, shares, and protects your personal information. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. By using SOC.ai for SOC Managers, you agree to the collection and use of information in accordance with this policy.

4.1 Data Collection

We collect personal and non-personal information from users to provide and enhance the app’s functionality. The types of data we collect include:

• Personal Information: We may collect personally identifiable information such as your name, email address, and user credentials.
• Usage Data: We collect information about how you use the app, including the types of events monitored, actions taken, and interactions with the virtual assistant.
• Device Information: We may collect information about your device, such as your IP address, device type, operating system, and app version, to improve app performance and troubleshoot issues.

4.2 Data Use

The data we collect is used for the following purposes:

• Service Provision: To provide security alerts, event monitoring, and support features tailored to your environment.
• App Improvement: To analyze user behavior and improve the functionality, security, and user experience of the app.
• Communication: To send important notifications and updates regarding app functionality, security alerts, or service changes.

4.3 Data Sharing

We do not share your personal data with third parties except in the following circumstances:

• Legal Requirements: If required by law or in response to a legal process (e.g., a subpoena or court order), we may disclose your data.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction, but we will notify you if that occurs.

4.4 Data Retention

We retain your data only as long as necessary to provide the services you request. Once this period expires, your data will be securely deleted from our systems unless otherwise required for legal or compliance purposes.

4.5 User Rights

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update or correct any inaccuracies in your personal data.
• Deletion: You can request that we delete your personal data, subject to applicable legal obligations.

4.6 Cookies and Tracking Technologies

We use cookies and other tracking technologies to enhance user experience and analyze how the app is used. You can control cookie settings through your device or browser settings.

4.7 Data Security

We implement industry-standard encryption and security measures to protect your personal data from unauthorized access, use, or disclosure.

4.8 Changes to Privacy Policy

We reserve the right to update this Privacy Policy periodically. Any changes will be posted on this page with an updated 'last modified' date. We recommend that you review this policy regularly to stay informed about how we are protecting your information.

4.9 Contact Information

If you have any questions or concerns about our privacy practices or this Privacy Policy, please contact us at: privacy@socai.net