Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Restating our details, customer details do not need supplying here.

Importer (who receives the Restricted Transfer)

Full legal name

The Plugin People Ltd

Main address

Pure Offices, Cheltenham Office Park,
Hatherley Lane, Cheltenham,
Gloucestershire, GL51 6SH, UK

Company Number

08404380

Key Contact

Andy Brook, CTO, andy@thepluginpeople.com

Table 2: Transfer Details

...

Extra Protection Clauses:

none

(i) Extra technical security protections

2 factor authentication wherever possible

The deployment works on a least privilege basis with group access policies for different environments (DEV/UAT/PROD)

Outbound SMTP mail must use TLS or SSL

Inbound POP/IMAP mail retrieval must use SSL

Mail stored as part of auditing is purged by policy after 30 days

Webhook ‘event’ data is purged by policy after 7 days to allow for review by customer and avoid data loss in cases where the monthly Capacity Plan is consumed or Plan Upgrade lapses, ie customer has 7d to purchase more capacity before webhook data will be lost.

A ‘dead end’ mailhost is used for consuming mail sent during testing with customer supplied email data to ensure no data can ‘leak’ to actual recipients.

Support closure requires JEMHC support staff to confirm via checkbox that local copies of data from support/flagged mail have been purged.

MS Windows is not used for development

(ii) Extra organisational protections

Access to cloud development environment is limited to cloud team only, named users

(iii) Extra contractual protections

none

...