How Visualware protects information assets, maintains compliance with CCPA and GDPR requirements, and safeguards the data entrusted to us.
The Visualware Information Security and Privacy Policy defines what is expected of employees, including all personnel affiliated with third parties authorized to work for or with the Company when receiving, transmitting, or using information, regardless of the information source and ownership. All information and forms of information, including but not limited to paper, digital, audio, and image/video, are covered under this policy.
All information handled by Visualware is classified into one of four grades, each with specific handling and retention requirements.
Data freely available for access by any person, regardless of whether the person works for the organization or is an individual providing the information. For example, public websites, publicity campaigns, and media information published for public consumption such as a press release.
Information released to or by the Company in the course of conducting its business. Such information is to be used only for internal purposes and must not be provided to any person(s) not directly employed by the Company. For example, support data provided for a technical support ticket, email exchanges, shared online meeting information, or internal Company information provided to employees.
Information provided to or by the Company in the course of conducting its business, where the audience is intentionally limited because of confidentiality concerns. This is information provided on a need-to-know basis. For example, information from a private desktop computer or financial information presented in a meeting for only those attending. This includes information provided under the expectation of an NDA.
Information provided to a select Company audience and shared strictly under the terms of "professional trust." Must not be given to any persons outside of that audience unless authorized in writing by the information owner. For example, security credentials, cyber encryption keys, strategic business information, internal Company financials, or sensitive employment information.
Email services will routinely contain information that originates from outside the Company. All company computer devices, including mobile devices, submitted to Sysadmin for network access approval will be required to have local data encryption enabled by default. No computer device will be approved for access to any Company network subnet without local data encryption being enabled.
With the exception of email, all digital information asset retention periods inherit the following maximum retention periods unless otherwise approved in writing: Public, no limit. Internal use, 360 days. Confidential, 90 days. Highly sensitive, 30 days.
Any information assets provided as documents must be converted and stored in digital form. If documents are also required to be retained in their original form, they must be clearly marked with the information grade and the acceptance date before submission to line management for secure filing. Otherwise, all non-digital information assets must be marked as "not retained [dated]" and returned to the information owner.
Digital information assets are reviewed weekly by System Administration. If assets are found to be incorrectly graded, including the retention period, an "information" violation IR will be escalated to the line manager for review. All assets marked to expire that are still required must have a retention extension approval confirmed in writing before the deadline. Assets that exceed the allocated retention period will be deleted without further notice.
Visualware solutions and website assets are fully compliant with CCPA/GDPR requirements for protecting personal data.
The CCPA defines personal information as "information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household."
The GDPR defines personal data as "any information relating to an identified or identifiable natural person (data subject), directly or indirectly, in particular by reference to an identifier."
This entire website is Copyright © 1997-2026 Visualware, Inc. All Rights Reserved. No portion of this website may be reproduced without prior written permission from Visualware. All Visualware products and product license keys are Copyright © 1997-2026 Visualware, Inc. All Rights Reserved. You may not run cracked versions of our software. If you do, you are breaking the law and will be reported.
MyConnection Server, MySpeed, and NetQCheck are registered trademarks of Visualware, Inc. Other product names and brand names are trademarks of their respective holders.
