How does MiOpsAI handle data breaches and incidents?

MiOpsAI follows a documented incident response process built around rapid containment, transparent communication, and regulatory compliance. The plan covers detection, classification, containment, eradication, recovery, and post-incident review, with notification timelines aligned to GDPR (72 hours), CCPA, and state breach notification laws in the United States.

Detection and monitoring

• 24/7 monitoring: automated alerting on anomalous access patterns, failed authentication spikes, unexpected data exports, and infrastructure health
• SIEM integration: security event logs centralized for correlation and threat detection
• Third-party scanning: continuous vulnerability scanning of dependencies and infrastructure
• Responsible disclosure program: security@miopsai.io for researchers to report findings safely

Response process

1. Detect and triage: incidents classified by severity (P1 critical / P2 high / P3 medium / P4 low) within 30 minutes
2. Contain: isolate affected systems, revoke credentials, block attack vectors
3. Investigate: scope determination, affected accounts identification, root cause analysis
4. Notify: affected customers contacted within regulatory windows (no later than 72 hours for GDPR-relevant incidents). Customer notification includes nature of incident, data affected, mitigation steps, recommended customer actions.
5. Eradicate and recover: patch the cause, restore service, verify integrity
6. Post-mortem: blameless review with public summary on the security page for material incidents

What we commit to in writing

• Notification within 72 hours of confirmed incidents affecting customer data
• Direct, plain-language communication (no PR-speak)
• Specific list of data affected per customer (not just "some data may have been accessed")
• Free credit monitoring offered when applicable
• Public post-mortem on material incidents within 30 days

Status page

A public status page shows real-time service health, scheduled maintenance, and incident history. Subscribe via email or RSS to be notified the moment something happens.

For Enterprise customers, a custom DPA (Data Processing Addendum) and incident response SLA can be negotiated as part of the contract, including dedicated incident contact and escalation path. Request access to receive our security and incident documentation during onboarding.