SECURITY AND COMPLIANCE
Security and data control, defined with your team
Security requirements differ by organisation and environment. Pagna defines data location, access, retention and review controls with your team during discovery and documents them in the engagement scope.
What is defined for each deployment
Data location and processing
Whether processing runs on your infrastructure, in a cloud environment or in a hybrid arrangement is agreed for each deployment, based on your requirements.
Access control
Who can access systems, data and outputs, and how access is granted and removed, is documented before deployment.
Retention
Retention periods for video, recordings, transcripts and logs are set with your team and in line with your policies.
Human review and logging
Lothar alerts and Automis escalations are reviewed by your people. Logging and audit needs are scoped during discovery.
Compliance and regulation
No blanket compliance claims
Pagna does not make blanket statements about regulatory compliance. Obligations depend on your sector, data and deployment model.
Reviewed with your teams
Applicable data protection and sector requirements in the UAE and wider GCC are reviewed with your legal and compliance teams during scoping, and responsibilities are written into the engagement scope.
Bring your security questions to the first conversation
We will cover data location, access, retention and review requirements as part of the technical consultation.