Incident Response Policy

Last updated: February 06, 2026

Overview

We maintain a plan for detecting, responding to, and recovering from incidents (e.g., breaches, outages).

Monitor via logs (Winston); users report via support. Incidents classified (low-high).

Team responds within 1 hr for high-severity. Contain, assess, notify affected users within 72 hrs if PII involved.

Restore from backups; post-incident review within 7 days. Updates to policies as needed.

Report incidents: jfeliciano@scottapplications.com