Information Classification Policy
Last updated 1 march, 2024
Anvenssa.AI converts your existing system of records into a system of intelligence that provides actionable insights. Our mission is to prevent issues from slipping through the cracks while providing management and executive teams (across support, customer success, product, and engineering teams) powerful, customizable, and self-serve solutions.
All Anvenssa.AI associates share in the responsibility for ensuring that Anvenssa.AI information assets receive an appropriate level of protection by observing this Information Classification policy:
- Anvenssa.AI Managers or information ‘owners’ shall be responsible for assigning classifications to information assets according to the standard information classification system presented below. (‘Owners’ have approved management responsibility. ‘Owners’ do not have property rights.)
- Where practicable, the information category shall be embedded in the information itself.
- All Anvenssa.AI associates shall be guided by the information category in their security-related handling of Anvenssa.AI information.
- All Anvenssa.AI information and all information entrusted to Anvenssa.AI from third parties falls into one of four classifications in the table below, presented in order of increasing sensitivity.
Unclassified Public
Information is not confidential and can be made public without any implications for Anvenssa.AI. Loss of availability due to system downtime is an acceptable risk. Integrity is important but not vital.
- Product brochures widely distributed
- Information widely available in the public domain, including publicly available Anvenssa.AI website areas
- Newsletters for external transmission
Proprietary
Information is restricted to management-approved internal access and protected from external access. Unauthorized access could influence Anvenssa.AI’s operational effectiveness, cause an important financial loss, provide a significant gain to a competitor, or cause a major drop in customer confidence. Information integrity is vital.
- Internal project documentation
- Company-wide emails not containing sensitive information
- Internal process guidelines
Client Confidential Data
Information received from clients in any form for processing in production by Anvenssa.AI. The original copy of such information must not be changed in any way without written permission from the client. The highest possible levels of integrity, confidentiality, and restricted availability are vital.
- Client data (e.g., CRM integrations)
- Client information
- Client communications (including Emails, Slack communication, in-product messaging)
Company Confidential Data
Information collected and used by Anvenssa.AI in the conduct of its business to employ people, to log and fulfill client orders, and to manage all aspects of corporate finance. Access to this information is very restricted within the company. The highest possible levels of integrity, confidentiality, and restricted availability are vital.
- Salaries and other personnel data
- Accounting data and internal financial reports
- Confidential customer business data and confidential contracts
- Non-disclosure agreements with clients/vendors
- Anvenssa.AI business plans
- Passwords and information on corporate security procedures
- Know-how used to process client information
- Standard Operating Procedures used in all parts of Anvenssa.AI’s business
- All Anvenssa.AI-developed software code, whether used internally or sold to clients
All associates are required to follow this Information Classification Policy to ensure that Anvenssa.AI’s information assets are protected appropriately.