Incident response and data breaches

Our commitment

Elevale maintains an incident response process. If a personal data breach occurs, we will:

1. Contain and assess the incident promptly
2. Notify the relevant supervisory authority within 72 hours where required (GDPR Art. 33)
3. Notify affected users without undue delay when the breach poses high risk (GDPR Art. 34)
4. Document the breach, remediation, and lessons learned

If you suspect an issue

Contact [email protected] immediately. Workspace admins should also notify their agency or data protection contact if applicable.

Your responsibilities

As a workspace admin, protect credentials, enable MFA, and review audit logs regularly. Report suspicious activity promptly.