Security and Data Handling

1. Security approach

Lynka uses administrative, technical and organizational measures designed to protect Customer Data and the Services. Security controls are reviewed and may change as the product, infrastructure and risks change.

2. Current categories of controls

Authenticated access controls.
Row Level Security and workspace isolation across application tables where configured.
Role and permission controls.
Private storage for protected documents, reports, lifecycle exports and avatars.
Protected transport for service communications.
Logging and monitoring designed to detect security, abuse and reliability issues.
HMAC-authenticated internal lifecycle workers with replay protection for sensitive deletion/export jobs.
Controlled deletion workers for accounts, workspaces, stored files and tracked external-storage objects.

3. Shared responsibility

Customers must use appropriate roles, protect credentials and devices, remove former users promptly, secure connected integrations and API keys, and evaluate whether Lynka is appropriate for their regulatory requirements. No internet service can guarantee absolute security.

4. Security claims

Lynka will not claim a security certification, compliance attestation, penetration-test result, encryption standard, recovery objective or uptime guarantee unless the statement is current, documented and supported by the actual production environment.

5. Reporting a concern

Report a suspected security or privacy incident to support@lynkacrm.com. The DPA governs required Customer Personal Data breach notifications.