Longview (‘Longview Solutions Canada, ULC’, ‘Longview of America, LLC’, ‘Longview Software Limited’, ‘TM Software LLC’ (“TideMark”), ‘Tidemark Systems EMEA SA‘, and ‘Longview Europe GmbH’ (collectively, “Longview”, “we” and “us”) creates enterprise software that drives competitive advantages for Finance and Tax teams. Longview offers customers the use of the Longview and Tidemark applications in a secure and reliable cloud solution. This provides the benefits of Longview, acting as a controller, to maintain and manage the application servers, hosted infrastructure, sFTP and Citrix servers, and the application logs which are used in Logz.io for error alerting. The customer acts a data controller over the application, the data within it, and the users accessing it, while Longview is considered the processor for these activities. In some cases, Longview Support is provided access to the customer cloud application in order to provide support. This section of the Longview privacy policy clarifies how we handle information to which we may have been provided access and how we ensure your information is secure.

How we access your information

Longview’s main support group does not have access to the customer cloud application. In the rare case that the customer wants Longview Support or Professional Services to access the application, the customer themselves must provide an ID and password for them to use. Only the cloud team has access to the default administration account in order to perform server maintenance tasks. Longview does not use this ID to access any information held in your application.

How we use your information

Longview will only use information stored within a customer’s cloud application, with their authorization, for troubleshooting or implementation assistance. Log files within the Longview application may contain User ID’s as well as IP addresses. Longview uses log files in order to:

• Alert for any system errors

• Troubleshoot issues logged with support

• For forensic investigation in case of a breach

Longview may use the personal information held within the log files to help determine the user ID associated with the action being investigated in the system.

How we share your information

Longview does not share any Longview Cloud application information with any third-parties. Within the Longview organization, any information specifically provided to support by the customer may be shared with Software Engineering if this is required in order to assist with a software investigation. It may also be shared with the Professional Service resource that was involved in the customer implementation or configuration, if additional assistance is required. In the event of a subpoena or similar legal process, Longview may be required to provide access to Longview customer cloud data to comply with legally mandated reporting, disclosure or other legal process requirements. In such an event, Longview would involve legal advice as well as notifying the customer without delay.

How we safeguard your information

Longview has made a substantial investment in its server, database, backup and firewall technologies to protect the information assets of the Longview network, including the confidentiality of personal information.

• Data-in-transit is secure at all times. All communication is encrypted using several techniques including use of system identifiers, layers of generic and proprietary compression, and other encryption/obfuscation methods.

• Each Customer’s data logically separated by unique database tables or schemas.

• Customer data backups are encrypted using 256-bit AES encryption.

• Environments are protected using next-generation threat protection software.

• Physical and logical firewalls exist at different layers of the cloud infrastructure.

Longview maintains a relationship with our sub-service providers through regular communication, and on an annual basis, Longview management reviews the third party audit reports for investigation and resolution of identified deficiencies in physical and environmental controls.

How long we keep your information

Longview Cloud retains log files as well as database and application backups for 1 (one) year. The customer has the ability to download and store Longview application logs as long as they wish. Longview powered by Tidemark (Tidemark) stores application backups for 15 days and log files for two (2) weeks. The backup and log file retention process is automated through internally created scripts as well as Logz.io application logic.