Terms of Service & Security Policy

Security and Data Protection (SOC 2)

Acenda maintains a comprehensive information security program designed to protect the Confidentiality, Integrity, and Availability of Customer Data. Our controls are audited annually against the AICPA SOC 2 Type 2 standards.

1.1 Security Incident Reporting

If you discover a security vulnerability or believe a security incident has occurred, please notify our Security Team immediately at security [at] acenda.com. We commit to acknowledging receipt of your report within 24 hours.

1.2 Breach Notification

In the event of a confirmed unauthorized access to or disclosure of Customer Data (a "Security Breach"), Acenda will notify affected Customers without undue delay, and in no event later than 72 hours after becoming aware of the breach, pursuant to our internal Incident Response Plan.

1.3 Data Encryption

Acenda employs industry-standard encryption for data at rest (AES-256) and data in transit (TLS 1.2 or higher). It is the Customer's responsibility to ensure that their local systems and browser configurations support these protocols.

System Availability & Continuity

Service Level Commitments

Acenda targets a system availability of 99.9%, excluding scheduled maintenance. Scheduled maintenance windows are typically performed during off-peak hours, and notice is provided via the Customer Dashboard at least 48 hours in advance.

Disaster Recovery

We maintain a formal Disaster Recovery (DR) and Business Continuity Plan (BCP) that is tested at least annually. Our infrastructure is geographically redundant to ensure minimal disruption in the event of a regional outage.