Security at EMACS

EMACSHQ LLC is committed to protecting the confidentiality, integrity, and availability of information entrusted to the EMACS platform.

EMACS is designed as a secure, multi-tenant workforce operations platform. We apply administrative and technical safeguards appropriate to the nature of the information processed by the platform and continuously evaluate our security practices as the service evolves.

Our security program includes encryption of data in transit and at rest, role- and permission-based access controls, tenant-level data separation, restricted administrative access, secure management of application credentials and secrets, and security controls provided by our underlying cloud infrastructure.

EMACSHQ maintains a written information security program and a documented incident response process. Potential security incidents are evaluated and managed according to established procedures covering identification, containment, investigation, remediation, recovery, documentation, and post-incident review.

Where a confirmed security incident affects customer information, EMACSHQ will evaluate its notification obligations and communicate with affected customers in accordance with applicable contractual and legal requirements.

EMACSHQ also evaluates third-party technology providers used in delivering the EMACS service and applies appropriate safeguards to integrations and access to customer information.

Security is an ongoing responsibility. EMACSHQ reviews and strengthens its security controls as the platform, threat environment, customer requirements, and applicable obligations evolve.