Privacy Policy

How do we protect and store your data?

We have implemented appropriate technical and organizational security measures designed to protect your User Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, and other unlawful or unauthorized forms of Processing, in accordance with applicable laws. In certain instances, we may use Secure Sockets Layer encryption and/or transfer certain User Information in a non-human readable format to provide protection. However, we cannot guarantee there will not be a breach, and we are not responsible for any breach of security or for the actions of any third parties.

Because the internet is an open system, the transmission of information via the internet is not completely secure. Although we will implement reasonable measures to protect your information, we cannot guarantee the security of your data transmitted to us using the internet. Any such transmission is at your own risk and you are responsible for ensuring that any Personal Information that you send to us are sent securely.

We take every reasonable step to ensure that your User Information that we process is accurate and, where necessary, kept up to date, and any of your User Information that we Process that you inform us is inaccurate (having regard to the purposes for which they are Processed) is erased or rectified. We take every reasonable step to ensure that your User Information that we Process is limited to the User Information reasonably necessary in connection with the purposes set out in this Policy or as required to provide you services or access to the Services.

We take every reasonable step to ensure that your User Information is only processed for the minimum period necessary for the purposes set out in this Policy. The criteria for determining the duration for which we will keep your User Information are as follows: we will retain copies of your User Information in a form that permits identification only for as long as is necessary in connection with the purposes set out in this Policy, unless applicable law requires a longer retention period. Unless there is a specific legal requirement for us to keep the information, we plan to retain it for no longer than is necessary to fulfill a legitimate business need.

Eyvo has skilled and experienced personnel with hands on knowledge of Federal regulations and guidelines (including National Institute of Standards and Technology [NIST] publications – Guide for the Security Certification and Accreditation of Federal Information Systems standards, Government Information Security Reform Act [GISRA], Office of Management and Budget [OMB] A-130, Computer Security Act, Privacy Act, and Federal Information System Controls Audit Manual [FISCAM]). We perform Security Audits of our environment at regular intervals to ensure compliance with applicable laws and regulations and industry standards.

Eyvo has a proactive approach in development of a defect free and secure applications. In addition Eyvo is actively leveraging NIST 800-171 to enhance its current organizational Information Security Management System. Eyvo guarantees that any non-public information/data managed by or hosted on Eyvo’s systems will be protected during and after the performance of the contract in accordance with the applicable laws and regulations and the terms and conditions of the confidentiality agreement with the client. Eyvo ensures the confidentiality of its information/data by complying with the applicable laws and regulations and utilizing industry best-practices for security and privacy of information. Availability of our client’s information/data, in an event of a disaster, is ensured by utilizing our robust database clustering technologies combined with our state of the art business continuity and disaster recovery program. In addition we ensure integrity of our client information/data in transit and in rest by leveraging industry best-practices and encryption technologies. Eyvo uses managed intrusion prevention and intrusion detection services to detect and prevent any unauthorized activities in our hosted environment.

In addition we leverage the Control Scan Service to scan our environment at regular intervals to ensure our servers are secure. Our applications do not maintain any sensitive data in browsers cache, persistent cookies, hidden fields or any other risk prone locations. We disallow indexing of public files by search engines.

Unless otherwise requested in writing from you, upon you leaving Eyvo as a Client, Eyvo will, within 72 hours, delete all your data (including but not limited to our eBA application transactions, any/all of your business data (including suppliers, internal accounting structures, financial data), any personal information (your user's names, contact information), and email correspondence from its live production servers and place them into an encrypted archive cold storage. Eyvo will automatically permanently destroy this archive after 1 year has elapsed from your date of departure, and there will be no way to recover that data once it's deleted from our archives.

Or Via Regular Mail at:

More information can be found at:

European Union and Switzerland residents should visit the European DAA by clicking here
Canadian residents should visit the DAA of Canada by clicking here
U.S. residents and residents of all other countries or territories not listed above can click here for the DAA site to learn more about the use of cookies, your opt-out choices, and more.

Cookies :

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology
For further information, visit allaboutcookies.org