BY ACCESSING, USING AND/OR ORDERING THE SERVICE, YOU WARRANT THAT YOU ARE AUTHORIZED TO DO SO, AND AGREE TO BE BOUND BY THESE TERMS. IF YOU ARE USING THE SERVICE ON BEHALF OF AN ORGANIZATION OR LEGAL ENTITY (“ORGANIZATION”), THEN YOU ARE AGREEING TO THESE TERMS ON BEHALF OF THAT ORGANIZATION, AND YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO BIND THAT ORGANIZATION TO THESE TERMS. IN THAT CASE, “YOU” AND “YOUR” REFERS TO YOU AND THAT ORGANIZATION.
1. The Service
The Service is offered on a software-as-a-service subscription basis subject to the Terms. Joinery retains all rights to the Service. We may change the Service in our sole discretion from time to time as we refine it and add more or other features. We may also stop, suspend, or modify the Service at any time without prior notice to you, in any circumstances we reasonably determine to be necessary, including but not limited to perform essential repairs/maintenance to the Service; where your use of the Service is in breach of your obligations under this agreement; where payment of the fees for the Service are not paid in a timely manner. We also may impose limitations on bandwidth usage for the Service as we, in our sole discretion, determine to be appropriate.
You acknowledge and agree that the Service operates on, or with, or using application programming interfaces (“APIs”) and/or other services operated or provided by third parties (“Third Party Services”). Joinery is not responsible for the operation of any Third Party Services, nor the availability or operation of the Service to the extent such availability and operation is dependent upon Third Party Services. You are solely responsible for procuring any and all rights necessary to access Third Party Services and for complying with any applicable terms or conditions thereof. Joinery does not make any representations or warranties with respect to Third Party Services. Any exchange of data or other interaction between you and Third Party Services is solely between you and that third party, and is governed by such third party’s terms and conditions.
2. Pricing and Payment
You shall make payment for the fees as specified in the Terms. All fees are exclusive of all applicable taxes, and you agree to pay any and all taxes that you are obliged to pay by law in relation to any transaction between you and Joinery. All payments shall be made in US dollars, unless agreed otherwise in the Terms. All payment will be due within 30 days of the date of the invoice, unless agreed otherwise in the Terms. If Customer requires a purchase order (P.O.), it shall be provided when the Order Form or SOW is signed. In no event shall Customer's failure or delay in providing a P.O. alter its payment obligations under the relevant Order Form or SOW. If you do not make payment when due, in addition to our rights under Section 1, Joinery may charge interest on the unpaid amount at the lesser of 1.5% per month or the maximum rate allowed by law.
The Terms will specify the usage limitations applicable to your use of the Service, which may include the maximum number of authorized users and agreed bandwidth. You agree to keep a record of your usage of the Service, including the number of users. Joinery reserves the right to monitor your actual use of the Service. Where your actual use exceeds the limitations agreed in the Terms, upon receipt of Joinery’s invoice, you shall pay additional fees proportionate to your excess use for the remainder of the term. Any credits due to you will be applied on the next invoice against the amounts then due.
3. Content
In order to make use of the Service, you or your users may upload, create, or input information, (personal) data, documentation, and other materials (together, “Content”) into the Service. You have sole responsibility for all Content which you store in the Service, whether publicly posted or privately transmitted by you. We do not endorse, support, represent or guarantee the completeness, truthfulness, accuracy, or reliability of any Content or communications posted via the Service or endorse any opinions expressed via the Service. If you use or rely on any Content or materials posted via the Service or obtained by you through the Service, it is at your own risk. Joinery disclaims all liability as regards any of your Content, and will not be liable for (i) any loss or damage of any kind incurred as a result of the use of any Content in the Service, (ii) any losses, costs, or expenses resulting from the loss or corruption of your Content, and/or (iii) any third party claims relating to your Content.
You agree not to upload Content to the Service that: (i) may create a risk of harm, loss, physical or mental injury, emotional distress, death, disability, disfigurement, or physical or mental illness to you, to any other person; (ii) may create a risk of any other loss or damage to any person or property; (iii) seeks to harm or exploit children by exposing them to inappropriate content, asking for personally identifiable details or otherwise; (iv) may constitute or contribute to a crime or tort; (v) contains any information or content that we deem to be unlawful, harmful, abusive, racially or ethnically offensive, defamatory, infringing, invasive of personal privacy or publicity rights, harassing, humiliating to other people (publicly or otherwise), libellous, threatening, profane, or otherwise objectionable; (vi) contains any information or content that is illegal (including, without limitation, the disclosure of insider information under securities law or of another party’s trade secrets); (vii) contains any information or content that you do not have a right to make available under any law or under contractual or fiduciary relationships; or (viii) contains any information or content that you know is not correct and current. You agree that any Content that you post does not and will not violate third party rights of any kind, including, without limitation, any intellectual property rights of third parties, or rights of privacy. We reserve the right to reject and/or remove any Content that we believe, in our sole discretion, violates the Terms.
We also reserve the right to access, read, preserve, and/or disclose any information as we reasonably believe is necessary to (i) perform the Service, (ii) satisfy any applicable law, regulation, legal process or governmental request, (iii) enforce the Terms, including investigation of potential violations, (iv) detect, prevent, or otherwise address fraud, security or technical issues, (v) respond to user support requests, or (vi) protect the rights, property or safety of Joinery, its users and/or the public.
You retain full ownership of your Content, but you hereby grant us a worldwide, non-exclusive, irrevocable, transferable, royalty-free license (with the right to sublicense) for the term of the Service, to use, copy, reproduce, process, adapt, modify, publish, transmit, edit, translate, make derivatives, display and distribute any and all Content in connection with providing the Service. This license also includes the right to modify or adapt your Content as part of the Service in order to transmit, display or distribute it over computer networks and in various media and/or make changes to your Content to conform and adapt that Content to any requirements or limitations of any networks, devices, services or media. You also extend these rights to the Third Party Services with whom we work to provide the Service. You represent and warrant that you have the rights and authority necessary to grant the rights granted herein to any Content that you submit, including all necessary rights to upload your content for use in accordance with the Terms.
With written permission from you, we may use your name and logo on our website located at https://joinery.com/ for the purpose of marketing Joinery and the Service. Use of your name and logo on the website will be revocable by you for any reason, at any time, provided you exercise this right in writing.
4. Acceptable uses of Joinery
Joinery is trusted by its users, and we trust you to use our Service responsibly. You agree not to misuse the Service. For example, you must not, and must not attempt to use the Service to or for (i) any unlawful purposes or for promotion of illegal activities; (ii) post any Content in violation of any applicable law, including intellectual property laws and right of privacy or publicity laws, or any contractual obligation; (iii) impersonate others, or otherwise misrepresent your affiliation with a person or entity in a manner that does or is intended to mislead, confuse, or deceive others; (iv) publish or post other people’s private or personally identifiable information, such as credit card numbers, street address or Social Security/National Identity numbers; (v) send spam; (vi) publish or link to malicious content intended to damage or disrupt another user’s browser or computer or to compromise a user’s privacy; (vii) access, tamper with, or use non-public areas of the Service, Joinery’s computer systems, or the technical delivery systems of Joinery’s providers; (viii) probe, scan, or test the vulnerability of any system or network or breach or circumvent any security or authentication measures; (ix) access or search the Service by any means other than our publicly supported interfaces (for example, “scraping”); (x) forge any TCP/IP packet header or any part of the header information in any email or posting, or in any way use the Service to send altered, deceptive or false source-identifying information; (xi) interfere with, or disrupt, the access of any user, host or network, including, without limitation, sending a virus, overloading, flooding, spamming, mail-bombing the Service, or by scripting the creation of Content in such a manner as to interfere with or create an undue burden on the Service. This list is not exhaustive. You and all of your users agree to comply with all local laws regarding online conduct and acceptable content.
We may investigate and/or suspend your account if you violate any of the above rules. Furthermore, we reserve the right to immediately terminate your account without further notice in the event that, in our sole and absolute judgment, you violate the Terms, or abuse the Service.
Some use of our Service may require you to download a client software package (“Software”). Joinery hereby grants you a limited, nonexclusive, non-transferable, revocable license to use the Software, solely to access the Service. Your license to use the Software will be automatically revoked if you violate the Terms and if your Service term ends. You must not reverse engineer or decompile the Software, nor attempt to do so, nor assist anyone else to do so. Our Service may update the Software on your device automatically when a new version is available.
5.Your Account
You must provide us with accurate information when you create your Joinery account. Your Joinery account gives you access to the Service. We may maintain different types of accounts for different types of users or organizations. When you connect to Joinery through a Third Party Service, you thereby give us permission to access and use your information from that Third Party Service (on such terms as are permitted by that service), and to store your log-in credentials for that service. You may never use another user’s Service account without permission.
You are responsible for safeguarding the password that you use to access the Service and for any activities or actions under your password, whether your password is with Joinery or a Third Party Service. We encourage you to use “strong” passwords that use a combination of upper and lower case letters, numbers and symbols with your account. You agree not to disclose your password to any third party. Joinery cannot and will not be liable for any loss or damage arising from your failure to comply with the above requirements. You must notify Joinery immediately upon becoming aware of any breach of security or unauthorized use of your account.
6. Support
Joinery will provide Technical Support to you via email on weekdays during the hours of 9:00 am through 5:00 pm EST, with the exclusion of Federal Holidays (“Support Hours”).
You may initiate a helpdesk ticket by emailing support@joinery.com.
Joinery will endeavor to provide a response to all Helpdesk tickets within twenty-four (24) hours.
7.Confidential Information
“Confidential Information” means all information and materials obtained by a party (the “Recipient”) from the other party (the “Disclosing Party”), whether in tangible form, written or oral, that is identified as confidential or would reasonably be understood to be confidential given the nature of the information and circumstances of disclosure, including without limitation any information about the business practices of either party and the Terms. Confidential Information does not include information that (a) is already known to the Recipient prior to its disclosure by the Disclosing Party; (b) is or becomes generally known through no wrongful act of the Recipient; (c) is independently developed by the Recipient without use of or reference to the Disclosing Party’s Confidential Information; or (d) is received from a third party without restriction and without a breach of an obligation of confidentiality. The Recipient shall not use or disclose any Confidential Information without the Disclosing Party’s prior written permission, except as necessary for the provision or use of the Service. The Recipient shall protect the confidentiality of the Disclosing Party’s Confidential Information in the same manner that it protects the confidentiality of its own confidential information, but using not less than a reasonable degree of care. The Recipient may disclose Confidential Information to the extent that it is required to be disclosed pursuant to a statutory or regulatory provision or court order, provided that the Recipient provides prior notice of such disclosure to the Disclosing Party, unless such notice is prohibited by law, rule, regulation or court order.
“Prohibited Information” means credit or debit card numbers, passwords, protected health information as defined in HIPAA (45 C.F.R. § 160.103), and information relating to a customer or consumer of a financial institution under GLBA (15 U.S.C. §§ 6801–6809).
“Customer Data” means all permitted electronic data stored by Customer or processed through use of the Subscription Services, Customer Data does not include Prohibited Information.These confidentiality obligations shall remain in effect for so long as the Confidential Information of the Disclosing Party is retained.
8. California Consumer Privacy Act
“CCPA” means the California Consumer Privacy Act of 2018, Cal. Civ. Code §1798.100 et. seq., and its implementing regulations;
No Sale of Company Personal Information to Vendor. Company and Vendor hereby acknowledge and agree that in no event shall the transfer of Company Personal Information from Company to Vendor pursuant to the Agreement constitute a sale of information to Vendor, and that nothing in the Agreement shall be construed as providing for the sale of Company Personal Information to Vendor.
9. Intellectual Property Rights in the Service
All intellectual property rights, titles, and interests in and to the Service are and will remain the exclusive property of Joinery or its licensors (as applicable). The Service is protected by copyright, trademark, and other laws of both the United States and foreign countries. Nothing in the Terms gives you a right to use the Joinery name or any of the Joinery trademarks, logos, domain names, and other distinctive brand features. Any feedback, comments, or suggestions you may provide regarding Joinery, or the Service is entirely voluntary and you acknowledge and irrevocably agree that we will be free to use such feedback, comments or suggestions as we see fit and without any obligation to you.
Customer retains all rights to its Customer Data, and Joinery may use the Customer Data only to provide the Subscription Services and as permitted by this Agreement, and not for any other purpose. Customer is the owner and data controller for its Customer Data. Customer is responsible for the accuracy, integrity, and for obtaining all legally-required consents for, and complying with all data protection laws applicable to the use of Customer Data in the Subscription Services, for examining and confirming results before use, and adopting procedures for identifying and preventing errors in the Customer Data. Each party will use diligence in the protection of Customer Data and in preventing any unauthorized person(s) from gaining access thereto.
10. Data Protection & Data Security
We care about the privacy of our users. We may collect, use and share personally identifiable information and non-personally identifiable information as described in our Privacy Policy as accessible at https://joinery.com/privacy-policy. To be clear, aside from the exceptions we identify in the Privacy Policy and the Terms, no matter how the Service changes, we won’t share your Content with others unless: (a) you have given us permission to do so; (b) we are required to by law or by valid legal process; or (c) we need to do so in order to provide you the Service. By using the Service, you agree to the collection of such information, and to have your personal data collected, used, transferred to, and processed by us and by third parties on our behalf.
We shall implement and maintain reasonable administrative, physical and technical safeguards that are designed to prevent any unauthorized use, access, processing, destruction, loss, alteration, or disclosure of any of your data (including any applicant or employee data furnished by you as may be held or accessed by us).
11. Third Party Links
The Service may have links to third-party websites, advertisers, services, special offers, or other events or activities that are not owned or controlled by us. We do not endorse or assume any responsibility for any of these third-party sites, information, materials, products, or services. If you access a third party website from the Service, you do so at your own risk, and you understand that these Terms and our Privacy Policy do not apply to your use of those sites. You expressly relieve Joinery from any and all liability arising from your use of any third-party website, service, or content and agree that your dealings with any third-party website, service, or content is only between you and such third parties. You agree that we are not responsible for any loss or damage of any sort in your dealings with such third parties. Many of these third-party services expressly disclaim all warranties, support or other liabilities or obligations to you in respect of their software or service. For example, Tableau requires us to communicate to you that they shall have no warranty, support or other obligation or liability to you in respect of your use of its software. You should read the applicable Terms of Service and Privacy Policy of any third-party link or service before using them.
12. Modifications
We may revise these Terms from time to time and the most current version will always be posted on our website. By continuing to access or use the Service after revisions become effective, you agree to be bound by the revised Terms. If you do not agree to any updated terms, please stop using the Service.
13. Indemnity
TO THE FULLEST EXTENT ALLOWED BY APPLICABLE LAW, YOU AGREE TO INDEMNIFY AND HOLD JOINERY, ITS AFFILIATES, OFFICERS, AGENTS, EMPLOYEES, SUPPLIERS, LICENSORS AND PARTNERS HARMLESS FROM AND AGAINST ANY AND ALL CLAIMS, LIABILITIES, DAMAGES (ACTUAL AND CONSEQUENTIAL), LOSSES AND EXPENSES (INCLUDING ATTORNEYS’ FEES) ARISING FROM OR IN ANY WAY RELATED TO ANY THIRD PARTY CLAIMS RELATING TO (A) YOUR USE OF THE SERVICE (INCLUDING ANY ACTIONS TAKEN BY A THIRD PARTY USING YOUR ACCOUNT), AND (B) YOUR VIOLATION OF THE TERMS. IN THE EVENT OF SUCH A CLAIM, SUIT, OR ACTION (“CLAIM”), WE WILL ATTEMPT TO PROVIDE NOTICE OF THE CLAIM TO THE CONTACT INFORMATION WE HAVE FOR YOUR ACCOUNT (PROVIDED THAT FAILURE TO DELIVER SUCH NOTICE SHALL NOT ELIMINATE OR REDUCE YOUR INDEMNIFICATION OBLIGATIONS HEREUNDER).
14. Entire Agreement
The Terms will constitute the entire agreement (“Agreement”) between Joinery and you with respect to the subject matter contemplated herein, and supersede all oral statements and prior writings with respect to the subject matter contemplated herein. This Agreement is entered into after full investigation by each party, and neither party is relying on any statement or representation made by the other not embodied in this Agreement.
15. No Warranty - Joinery is available "As-Is"
Though we want to provide a great service, there are certain things about the Service we can’t promise. THE SERVICE AND SOFTWARE ARE PROVIDED “AS IS”, AND TO THE FULLEST EXTENT PERMITTED BY LAW, NEITHER Joinery, ITS AGENTS, AFFILIATES, LICENSORS, NOR SUPPLIERS, MAKE ANY WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR USE, AND NON-INFRINGEMENT. Joinery MAKES NO REPRESENTATIONS ABOUT ANY CONTENT OR INFORMATION IN, OR FROM, AN END USER OR CUSTOMER SERVICES ACCOUNT. EXCEPT AS STATED IN THIS SECTION, Joinery DOES NOT REPRESENT THAT CUSTOMER’S USE OF THE SERVICE OR SOFTWARE WILL BE SECURE, UNINTERRUPTED OR ERROR FREE. NO STATEMENT OR INFORMATION, WHETHER ORAL OR WRITTEN, OBTAINED FROM Joinery IN ANY MEANS OR FASHION SHALL CREATE ANY WARRANTY NOT EXPRESSLY AND EXPLICITLY SET FORTH IN THE TERMS.
Joinery is not responsible for the accuracy, completeness, appropriateness, or legality of data, user posts, or any other information posted by a user.
Joinery will have no responsibility for any harm to your computer system, loss or corruption of data, or other harm that results from your access to or use of the Service or Software.
Neither Joinery nor its affiliates will knowingly introduce any time bomb, virus or other harmful or malicious code designed to disrupt the use of the Subscription Services or Software. Joinery hereby warrants that it will provide Subscription Services: (a) with reasonable skill and care, (b) using appropriately qualified and experienced personnel, (c) in accordance with generally accepted industry standards. Joinery has the authority to enter into the agreement and perform its obligations in accordance with the terms of this Agreement.
16. Limitation of Liability
TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL Joinery, ITS AFFILIATES, OFFICERS, EMPLOYEES, AGENTS, SUPPLIERS OR LICENSORS BE LIABLE FOR (A) ANY INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE, EXEMPLARY OR CONSEQUENTIAL (INCLUDING LOSS OF USE, DATA, BUSINESS, OR PROFITS) DAMAGES, REGARDLESS OF LEGAL THEORY, WHETHER OR NOT Joinery HAS BEEN WARNED OF THE POSSIBILITY OF SUCH DAMAGES, AND EVEN IF A REMEDY FAILS OF ITS ESSENTIAL PURPOSE; (B) AGGREGATE LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICE MORE THAN THE GREATER OF $20 OR THE AMOUNTS PAID BY YOU TO Joinery FOR THE PAST THREE MONTHS OF THE SERVICE IN QUESTION.
The Service is controlled and operated from its facilities in the United States. We make no representations that the Service is appropriate or available for use in other locations. Those who access or use the Service from other jurisdictions do so at their own volition and are entirely responsible for compliance with all applicable United States and local laws and regulations, including but not limited to export and import regulations. You may not use the Service if you are a resident of a country embargoed by the United States, or are a foreign person or entity blocked or denied by the United States government. Unless otherwise explicitly stated, all materials found on the Service are solely directed to individuals, companies, or other entities located in the United States.
17. Notice
We may provide notifications, whether these are required by law or are for marketing or other business related purposes, to you via email notice, written or hard copy notice, or through posting of such notice on our website, as determined by us in our sole discretion.
Any notice provided to Joinery hereunder shall be in writing to the notice address set forth above and shall be deemed given: i) upon receipt, if by personal delivery; ii) upon receipt, if sent by certified or registered US Mail (return receipt requested); or iii) one (1) day after it is sent, if by next day delivery by a major commercial delivery service. Notices sent via email are deemed received at the time that the notices are sent.
18. Miscellaneous
All sections of the Terms which by their nature should survive termination of any agreement between you and Joinery, will survive termination, including, without limitation, restrictions, accrued rights to payment, confidentiality obligations, intellectual property rights, warranty disclaimers, and limitations of liability.
You agree that the Service is primarily delivered from Florida; and these Terms are governed by the internal substantive laws of the State of Florida, without respect to its conflict of laws principles. The application of the United Nations Convention on Contracts for the International Sale of Goods is expressly excluded. You consent to the exclusive jurisdiction and venue of courts in the state of Florida in all disputes arising out of or relating to the Terms. If any provision of these Terms shall be adjudged by any court of competent jurisdiction to be unenforceable or invalid, that provision shall be limited to the minimum extent necessary so that these Terms shall otherwise remain in effect. No waiver shall be implied from conduct or failure to enforce or exercise rights under these Terms. Nor will any waiver be effective unless in a writing signed by a duly authorized representative on behalf of the party claiming to have waived.
These Terms and any rights and licenses granted hereunder, may not be transferred or assigned by you without our written permission, but may be assigned by us without restriction. Any attempted transfer or assignment by you will be null and void.
No supplement, modification, or amendment of these Terms shall be binding unless executed in writing by a duly authorized representative of each party.
Neither Joinery nor Customer will be liable for inadequate performance to the extent caused by a condition that was beyond the party’s reasonable control (for example, natural disaster or Internet disturbance).
Joinery may suspend performance under these Terms if you cease business operations or become subject to insolvency proceedings and the proceedings are not dismissed within 90 days.
Termination is not an exclusive remedy and the exercise of Joinery by any remedy under these Terms will be without prejudice to any other remedies it may have under these Terms, by law, or otherwise.
Upon any termination, Customer shall promptly pay all unpaid fees due through the end of the term of any applicable Order Form or SOW. Upon expiration or any termination, Customer shall immediately cease use of the Subscription Services and remove Customer Data using the existing functionality in the Subscription Services. If Customer requires Joinery’s assistance, the parties will agree to the fees, format and timeline for delivery of such data. Joinery will disable access to the applicable Subscription Services upon termination or expiration of the related Order Form or Agreement. Joinery will destroy all Customer Data within thirty (30) days after the expiration or termination of the related Order Form; provided, that Joinery may retain backup copies of Customer Data for a limited period of time in accordance with Joinery’s then-current backup policy.
19. Jurisdiction
Where a dispute arises in connection with this agreement, the parties shall meet in good faith to attempt to resolve it. Where the parties are unable to reach a resolution, the parties submit to the exclusive jurisdiction of the courts of the State of Kentucky. Each party shall bear its own costs in connection with such an action.
Nothing in this Section shall be deemed as preventing Joinery from seeking injunctive or other equitable relief from the courts as necessary to protect any of Joinery’s proprietary interests. Except as otherwise provided in these Terms, all remedies are cumulative and in addition to (not in lieu of) any other remedies available to a party at law or equity.
ALL CLAIMS MUST BE BROUGHT IN THE PARTIES’ INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING. YOU AGREE THAT, BY USING THE SERVICE, YOU AND JOINERY ARE EACH WAIVING THE RIGHT TO A TRIAL BY JURY OR TO PARTICIPATE IN A CLASS ACTION.
EXHIBIT A
Technical and Organizational Security Measures
Joinery will only use Customer Data for the purposes of fulfilling its obligations under the Agreement. Joinery will maintain and enforce physical and logical security procedures with respect to its access and maintenance of Customer Data contained on Joinery servers.
Joinery will use reasonable measures to secure and defend its location and equipment against “hackers” and others who may seek to modify or access the Joinery servers or the information found therein without authorization. Joinery will test its systems for potential security vulnerabilities at least annually.
Joinery has a written information security program (“Information Security Program”) that includes administrative, technical, and physical safeguards that protect against any reasonably anticipated threats or hazards to the confidentiality of the Customer Data, and protect against unauthorized access, use, disclosure, alteration, or destruction of the Customer Data. In particular, the Joinery’s Information Security Program shall include, but not be limited, to the following safeguards where appropriate or necessary to ensure the protection of Confidential Information and Personal Data:
Access Controls – policies, procedures, and physical and technical controls: (i) to limit physical access to its information systems and the facility or facilities in which they are housed to properly authorized persons and (ii) to authenticate and permit access only to authorized individuals.
Security Incident Procedures – policies and procedures to detect, respond to, and otherwise address security incidents, including procedures to monitor systems and to detect actual and attempted attacks on or intrusions into Customer Data or information systems relating thereto, and procedures to identify and respond to validated security incidents, mitigate harmful effects of security incidents, and document security incidents and their outcomes.
Contingency Planning – policies and procedures for responding to an emergency or other occurrence (for example, fire, vandalism, system failure, and natural disaster) that damages Customer Data or systems that contain Customer Data, including a data backup plan and a disaster recovery plan.
Device and Media Controls – policies and procedures that govern the receipt and removal of hardware and electronic media that contain Customer Data into and out of a Joinery data center, and the movement of these items within a Joinery data center, including policies and procedures to address the final disposition of Customer Data.
Audit controls – hardware, software, and/or procedural mechanisms that record activity in information systems that contain or use Customer Data.
Data Integrity – policies and procedures to guard against the unauthorized disclosure, improper alteration, or unauthorized destruction of Customer Data.
Transmission Security – encryption of electronic information while in transit to guard against unauthorized access to Customer Data that is being transmitted over public communications network.
Secure Disposal – policies and procedures regarding the disposal of Customer Data, taking into account available technology that can be used to sanitize storage media such that stored data cannot be practicably read or reconstructed.
Testing – Joinery shall regularly test the key controls, systems and procedures of its Information Security Program to verify that they are properly implemented and effective in addressing the threats and risks identified. Tests will be conducted or reviewed in accordance with recognized industry standards (e.g. ISO27001 or SSAE18 and their successor audit standards, or similar industry recognized security audit standards).
Adjust the Program – Joinery shall monitor, evaluate, and adjust, as it deems necessary, the Information Security Program in light of any relevant changes in technology or industry security standards, the sensitivity of Customer Data, and internal or external threats to Joinery or the Customer Data.
Security Training – Joinery shall provide annual security awareness and data privacy training for its employees that will have access to Customer Data.
Confidentiality - Joinery shall require that all of its employees who are granted access to Customer Data undergo appropriate screening, where lawfully permitted, and enter into a confidentiality agreement prior to being granted such access.
