PrivateAuto, requires all employees to adhere to an annually updated Acceptable Use Policy. This policy is crafted to prevent unauthorized disclosure, modification, removal, or destruction of information stored across our media platforms.

At PrivateAuto, we are committed to safeguarding the confidentiality, integrity, and availability of our systems and data. Access control is a fundamental aspect of our information security program, ensuring that only authorized individuals can access company resources and sensitive information. This Access Control Policy defines the principles and practices for managing and controlling access to company systems, data, and services.

At PrivateAuto, we are committed to conducting our business in an ethical, transparent, and responsible manner. Our Code of Conduct sets the standard for our interactions with clients, employees, vendors, and the wider community. By following this Code, we ensure that we foster a positive and ethical culture while maintaining the trust and confidence of all stakeholders.

At PrivateAuto, we are committed to protecting the security, integrity, and availability of our systems, data, and services. This Security Incident Response Policy outlines the processes and procedures we follow to respond to security incidents effectively. Our goal is to minimize the impact of security incidents, safeguard sensitive information, and ensure business continuity.

At PrivateAuto, we are dedicated to protecting the confidentiality, integrity, and availability of the information we manage. Information security is critical to the trust our customers, employees, and stakeholders place in us. This Information Security Policy outlines the principles and practices we follow to safeguard sensitive data and ensure compliance with relevant regulations.

At PrivateAuto, we recognize the importance of identifying, evaluating, and managing risks that could impact the security, integrity, and availability of our products, services, and business operations. This Risk Assessment Policy outlines our approach to assessing, mitigating, and monitoring risks across all areas of the organization.

December 2025 internal penetration testing detailed report

December 2025 internal penetration testing executive summary

December 2025 external penetration testing detailed report.

December 2025 external penetration testing executive summary

At PrivateAuto, we prioritize the security and confidentiality of our employees' information. Our HR Security measures are designed to protect personal data and ensure compliance with privacy regulations, fostering a safe and trustworthy environment for all staff members.

At PrivateAuto, we are committed to maintaining the highest standards of security and swiftly addressing any incidents that may arise. Our Security Incident Response Policy outlines the procedures and protocols for effectively managing and mitigating security incidents to protect our assets, data, and stakeholders.

At Private Auto, we conduct regular penetration testing to identify and mitigate vulnerabilities within our systems and applications. This proactive approach to security helps ensure the robustness and resilience of our digital infrastructure against potential threats.

At Private Auto, we recognize the critical role that our employees play in maintaining the security and integrity of our organization. Our comprehensive Employee Training program is designed to equip all team members with the knowledge and skills necessary to uphold our high standards of security, privacy, and compliance.

The Asset Management Policy at Private Auto Inc. is designed to ensure the efficient use, protection, and tracking of our valuable assets, both physical and digital. This policy outlines the standards and procedures for managing and safeguarding assets throughout their lifecycle, from acquisition to disposal.

At PrivateAuto, we prioritize the protection of our data through robust security measures. Our Data Security practices are designed to safeguard sensitive information and maintain the integrity, confidentiality, and availability of our data assets.

PrivateAuto Data Privacy Policy oversees the collection, usage, and protection of personal information. It ensures adherence to privacy regulations and safeguards user data against unauthorized access or misuse.

Employees undergo annual training on security and privacy awareness. The training covers various topics, including passwords, mobile devices, social engineering, physical security, phishing, and compliance.

At PrivateAuto, we utilize comprehensive network diagrams as a critical component of our network security strategy.

At PrivateAuto, we implement advanced firewall solutions as a fundamental component of our network security strategy. Firewalls serve as the first line of defense against unauthorized access and potential cyber threats, ensuring the protection and integrity of our network infrastructure.

At PrivateAuto, we are committed to ensuring the resilience and reliability of our operations through comprehensive Business Continuity and Disaster Recovery (BCDR) strategies. Our BCDR practices are designed to minimize the impact of disruptions and ensure the swift recovery of critical business functions.

At PrivateAuto, we implement robust encryption at rest to safeguard our data from unauthorized access and ensure its confidentiality and integrity.

At PrivateAuto, we ensure the secure transmission of data through robust encryption in transit measures.

At PrivateAuto, we understand the importance of managing and protecting data throughout its lifecycle. Our Data Retention Policy outlines the guidelines for the retention, archiving, and deletion of data to ensure compliance with legal requirements and industry best practices.

At PrivateAuto, we prioritize the protection and availability of our data through comprehensive data backup strategies. Our data backup procedures ensure that critical information is securely stored and can be quickly restored in the event of data loss or system failures.

The Master Services Agreement (MSA) at PrivateAuto outlines the terms and conditions governing the overall relationship between PrivateAuto and its clients.

PrivateAuto, Data Privacy Policy governs the collection, use, and protection of personal data. This policy ensures compliance with privacy laws and regulations, safeguarding user information from unauthorized access or misuse.

At PrivateAuto, we implement robust disk encryption as a critical component of our endpoint security strategy. Disk encryption ensures that all data stored on endpoint devices, such as laptops, desktops, and mobile devices, is securely encrypted, preventing unauthorized access and protecting sensitive information.

All employee endpoints are protected with an advanced EDR solution. Endpoint security signals are monitored regularly for anomalous activity.

At PrivateAuto, we prioritize proactive threat detection to safeguard our systems, data, and network from potential cyber threats. Our advanced threat detection strategies enable us to identify and respond to security incidents promptly, minimizing their impact and ensuring the integrity of our digital environment.