Privacy Breach Notification Process

Incident Response Team (IRT)

Zime has an incident response team dedicated to handling breaches. Satyam is the point of contact for incidents and responses, and as the Engineering Manager coordinates across the product, business team, and customers.

Incident Detection & Assessment

Zime uses Elastic Security (ELK stack) to detect unauthorized access to personal data. Alarms are configured for immediate alerts. Each incident is classified based on severity and impact, and corresponding action items are executed accordingly.

Internal Escalation & Investigation

• Notify internal stakeholders.
• Activate emergency response for the dev team to fix the issue immediately.
• Conduct root cause analysis and document the findings.

Customer Notification Procedure

Notify all customers within an agreed timeframe (e.g., <12 hours) after confirming a breach. The report includes:

• Nature of the breach
• Affected data categories
• Potential risks and impact
• Mitigation steps taken
• Corrective actions planned

Communication Channel

All communications are sent via email at dev@zime.ai.

Remediation & Follow-up

• Implement corrective measures to prevent recurrence.
• Keep all stakeholders informed until the issue is resolved.
• Conduct a post-incident review to improve future responses.

Regular Audits & Security Checks

Though the above are reactive steps, Zime also works proactively by engaging third-party security services to detect and fix potential breach points in advance.