PII protection

GoTranscript places a high priority on safeguarding Personally Identifiable Information (PII). From specialized trainingto strict access controls, we follow comprehensive processes that align with international data protection standards like GDPR. Below is an overview of how we ensure PII remains secure throughout our platform.

1. Specialized PII Training

• DoD-Level Framework
  Our team undergoes training originally designed for U.S. Department of Defense personnel and contractors, teaching them to identify, classify, and protect PII effectively.
• Regular Refreshers
  Employees receive ongoing education to remain current on evolving privacy regulations and best practices.

2. Role-Based Access Control

• Least Privilege Principle
  Only staff with a clear, job-related need can view or handle PII. Permissions are granted according to specific roles, minimizing the risk of exposure.
• Periodic Reviews
  We routinely audit user access to ensure no one retains unnecessary privileges.

3. Incident Response & Mitigation

• Defined Protocols
  GoTranscript has clear procedures to detect, report, and respond to any PII-related incidents.
• Timely Notifications
  In the event of a data breach, we notify affected clients and regulatory authorities (when applicable) according to legal requirements.

4. Data Classification & Segmentation

• Logical Segmentation
  PII is stored separately and encrypted (AES-256 at rest, SSL/TLS in transit) to prevent unauthorized cross-access.
• Policy Enforcement
  Our internal governance framework includes continuous monitoring to ensure all data remains properly categorized and protected.

5. Non-Disclosure Agreements (NDAs)

• Employee NDAs
  Every employee or contractor must sign an NDA before accessing any client data.
• Customized NDAs
  If you need additional confidentiality terms for PII, we can provide tailored agreements to meet specific regulatory or industry requirements.

6. Continuous Education & Updates

• Evolving Regulations
  We closely follow changes in data protection laws (GDPR, HIPAA, etc.) and update our internal policies to remain compliant.
• Proactive Improvements
  Our security and compliance teams review emerging threats, technologies, and best practices—adjusting protocols whenever necessary.