Privacy Policy

---

Aurora Audit Privacy Policy:

This Privacy Policy is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export, and delete your information.

What data is collected and how it's used

When using an Audit Signal application, the application gathers and uses information that is provided and controlled by you. All information provided by you is restricted and can only be used by you. All information provided to Audit Signal applications are encrypted at rest and may include:

• Name
• Address
• Email
• Phone Number

Audit Signal will gather information from you for license renewal and billing purposes. You will also enter interviewee names, job titles and email addresses while using the applications. This information will only be used by the application for auto-generated emails by the application. 

Auto-generated emails include the following:

• License renewal reminder
• New project start
• Project status updates
• Interviewee request
• New user account notice
• Report delivery notices

These emails are generated by the application and are archived in the customer’s instance of the application. This data will not be extracted or used in any way by Audit Signal.

Audit Signal may send out newsletters for marketing, but never sells or shares customer contact information. To opt out of newsletters see the “Opt-Out Policy” section below.

A link to this policy is available on the company's website.

Audit Signal reserved the rights to change and update this without requiring consent from our customers.

We will notify customers of any updates and they will be able to view our policy on our website.

Data Protection

All customer data is archived in their individual customer application instance. All data is stored in Audit Signal database using FIPS 140-2 compliant encryption algorithms. Virtual drive space and data backups are utilize hard drive encryption that is also complaint with FIPS 140-2. All data archives are stored on magnetic storage and duplicated across multiple datacenters.

Data Destruction 

All personal data within the application may be purged or changed at the customer’s discretion. Customer backups are maintained for the period of the license agreement and all customer created data is erased unless other arrangements have been made prior to the end of the contract. 

Audit Signal will provide a one-time data export at the end of the license period. Additional services fees may apply depending on your contract agreement.

Data Privacy and Data Classification

Audit Signal has designated the following data classifications:

• Confidential – Audit Signal intellectual property, customer data, employee data, regulatory compliance and financial data
• Internal – Any data that could impact the security of Audit Signal internal operations of data that could harm the organization’s reputation
• Public – Any data that does not represent any risk to the organization if released to the public. Any data release must be cleared by the DPO prior to release.

Audit Signal has designated the CFO as the Data Privacy Officer (DPO). The DPO has the following responsibilities:

• Overall responsibility to create and safeguard all Audit Signal and customer non-public classified data
• Inventory and track all non-public data storage
• Coordinate with the Information Security Officer to ensure appropriate safeguards are provided for all non-public data
• Develop, update, and oversee all privacy and security training
• Investigate all privacy related complaints
• Coordinate with our Human Resources department for any employee sanction activities relating to privacy issues
• Coordinate all regulatory compliance requirements with external counsel
• Audit Signal reserved the rights to change and update this without requiring consent from our customers.
• We will notify our customers and they will be able to view our policy on our website.

Cookies, Log Files and Tracking

Cookies: Audit Signal employs cookies and similar technologies to keep and track of your local computer’s settings such as which account you have logged into and notification settings. Cookies are pieces of data that sites, and services can set on your browser or device that can be read on future visits. We may expand our use of cookies to save additional data as new features are added to the service. 

Log Files: We gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pates, the files viewed on our website (e.g., HTML pages, graphics, etc.), operating system, date/timestamp and clickstream data.  We use this information to analyze trends, administer our website, track visitor’s movement around our website, and gather demographic information about our visitors as a whole. 

OPT-OUT Policy

Email Marketing. To stop receiving newsletters or marketing communications from use the “unsubscribe” mechanism provided in the communication.

Service-Related Announcements. Audit Signal will also send out service-related email announcements on rare occasions when it is necessary to do so.