Security Compliance

DM.2.01 - Terms of Service

Control Statement

Consent is obtained for IllumiDesk's Terms of Service (ToS) prior to collecting personal information and when the ToS is updated.

Context

One of the purposes of a ToS is to provide users specific information about what personal information IllumiDesk collects and alert them when that agreement is changed. This promotes transparency and allows users to make informed choices. The purpose of this control is to ensure the ToS includes information on what personal information is collected and a mechanism to alert users of any changes is in place.

Scope

This control applies to IllumiDesk's ToS.

Ownership

  • Legal and Compliance

Additional control information and project tracking

Non-public information relating to this security control as well as links to the work associated with various phases of project work can be found in the Terms of Service control issue.

Policy Reference

Framework Mapping

  • SOC2 CC

    • CC2.3