Smart Home Sentry's policy requires employees and contractors to use complex and unique passwords for all accounts with access to company data. They must also use two-factor authentication where available and are encouraged to store passwords in encrypted ways, such as with a password manager. Password sharing is prohibited, and suspected compromises must be reported immediately.

Smart Home Sentry's policies emphasize controlling data access through several means:

• Least Privilege: Where possible, Sentry AI employs the principle of least privilege when granting employees access to applications, services, and cloud platforms.
• Proprietary Information: Employees may access, use, or share proprietary information only to the extent authorized and necessary for their job duties.
• Affiliate Access: The Affiliate Access Policy details different types of access for affiliates (e.g., GitHub repositories, Google Workspace, Slack) and the requirements for obtaining and maintaining that access, including acceptance of relevant agreements and training.
• Data Classification: The Data Classification Policy assigns different levels of sensitivity to data (Public, Internal, Company Confidential, Customer Confidential) and outlines the corresponding protection and access requirements for each classification.

Our services rely on secure integrations with cloud infrastructure like AWS and GCP, and internal applications such as Google Workspace and GitHub. All devices connecting to our infrastructure must comply with strict asset management policies, ensuring secure endpoints and controlled access.

Sentry AI implements appropriate technical and organizational security measures to protect information and maintain data confidentiality. Access to client data is restricted based on the principle of least privilege, and credentials are encrypted to prevent unauthorized access. Sentry AI applies internal access policies and security safeguards to protect personal and client information, retains data only as necessary for business or legal requirements, and supports data deletion requests in accordance with applicable privacy obligations.

Our security framework includes extensive logging and monitoring of system and user activity. These logs are crucial for incident response, enabling forensic analysis of security events and verifying compliance with our security standards through regular reviews and audits.

Smart Home Sentry has extensive employee training.

Security Awareness Training: Employees and contractors receive training on the company's security policies and procedures within their first 30 days of employment and annually thereafter. They are required to acknowledge electronically that they have attended and understood the security policy. Affiliates with access to core SentryAI intellectual property must complete Security Awareness Training before access is granted and repeat it annually to maintain access.

Data Protection Policy: Employees are trained in online privacy and security measures as part of data protection efforts.

Code of Ethics & Business Conduct: Smart Home Sentry delivers periodic training to inform employees about the Code of Ethics, help them understand its application, and guide them on how to deal with situations where prohibited conduct may be encountered or solicited.