SysConnector Security & Compliance Overview

1) Data Protection

Encryption in transit

All data transmitted between SysConnector and connected services is protected using industry-standard TLS/HTTPS encryption.

Encryption at rest

Sensitive data stored by SysConnector is encrypted at rest, including production databases and backups (where applicable).

2) Access Control & Permissions

SysConnector supports team collaboration while keeping sensitive data protected.

Role-based access control (RBAC)

Users can be assigned roles (e.g. Admin, Member, External) with different access levels.

Project-based permissions

Connections and integrations can be organised into Projects. Users only get access to the Projects and connections they need — reducing risk and improving control.

PII visibility controls

Account owners can restrict access to personally identifiable information (PII) such as emails and phone numbers, especially useful for external agencies or contractors.

3) Credentials & Secrets Handling

SysConnector takes a secure approach to authentication and credential storage.

• Credentials and tokens are stored securely
• Sensitive values are protected and not exposed to unauthorised users
• Access is limited by least-privilege principles wherever possible

4) Auditability & Logs

SysConnector provides visibility into integration activity for troubleshooting and accountability.

Integration logs

Users can monitor sync runs to understand:

• what was synced successfully
• what failed
• error details for faster investigation

Account activity tracking (basic audit logs)

Key actions such as access changes and connection updates can be recorded for accountability.

5) Data Minimisation & Retention

SysConnector aims to collect and store only what is needed to deliver core functionality.

• Retention settings may vary based on plan and configuration
• Data retention policies may apply to logs and sync records
• Customers can request deletion of data where applicable

6) Privacy & Customer Responsibility

SysConnector acts as a data processor, helping customers move and manage their customer data across systems.

Customers remain responsible for:

• having appropriate consent / lawful basis to process customer data
• ensuring the data they sync complies with applicable privacy laws and internal policies

SysConnector supports this through structured data management and access controls.

8) Policies & Legal (available upon request)

SysConnector can provide the following for customers who require them:

• Sub-processor list (e.g. hosting and service providers)
• Privacy Policy
• Terms of Service
• Data Processing Agreement (DPA)