Free Cybersecurity Templates

This document is a California Resident Notice at Collection, designed to inform California residents about the collection, use, and disclosure of their personal information as required by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). It outlines categories of personal information collected, the purposes for its use, and the types of third parties with whom it may be disclosed. The notice also addresses rights related to the 'sharing' and 'selling' of personal information, and includes a 'Shine the Light' disclosure.

This document describes the GitHub Security Incident Response Team (SIRT), outlining its mission to protect GitHub's platform and user data by maintaining confidentiality, integrity, and availability. It provides essential contact information, details the team's operational policies, and explains the scope of its incident response and proactive security activities. The document also guides users and customers on how to report vulnerabilities and access support.

This document outlines the process for requesting content removal from GitHub, covering copyrighted, trademarked, and private information. It directs users to specific policies—DMCA, Trademark, and Private Information Removal—each with distinct reporting requirements. Users are advised to review these policies carefully before submitting a request and to consult legal counsel if they have questions.

This document is the GitHub Privacy Statement, outlining how GitHub, Inc. and GitHub B.V. handle users' Personal Data when they interact with GitHub's websites, applications, and services. It details the types of data collected, how it's used, and with whom it's shared, clarifying roles like Data Controller and Data Processor, especially when an organization provides a GitHub account. The statement also covers users' privacy rights, international data transfers, and compliance with frameworks like the EU-U.S. Data Privacy Framework.

This document provides a list of third-party subprocessors utilized by HEY, including cloud computing, payment processing, and customer support providers. It emphasizes that HEY maintains GDPR-compliant data processing agreements with each subprocessor to safeguard personal data. The list details each subprocessor's service and geographic location.

This document outlines the various cookies utilized by GitHub, detailing their purpose, the provider, and their expiration periods. It directs users to GitHub's Privacy Statement for further details on cookie usage and offers instructions on managing cookie preferences.

This Data Processing Agreement (DPA) outlines the terms under which a Provider processes personal data on behalf of a Customer, ensuring compliance with various data protection laws such as GDPR, UK GDPR, and CCPA. It details responsibilities for data processing, security measures, subprocessors, international data transfers, and incident response. This DPA supplements an underlying agreement between the parties.

This Data Protection Policy outlines a company's commitment to safeguarding personal data and respecting individual privacy rights. It details how personal data is collected, processed, stored, and managed in compliance with various data protection laws, including GDPR, CCPA, PDPA, and the Privacy Act. The policy also defines responsibilities for employees, contractors, third parties, and the Data Protection Officer.

This document outlines GitHub's policy and process for removing private information from repositories. It defines what constitutes "private information" for removal purposes, provides examples of content that is and is not appropriate for removal requests, and details the step-by-step procedure for submitting and handling such requests. The policy also clarifies how forks of repositories are addressed during the removal process.

This document outlines the Acceptable Use Policies for GitHub, detailing restrictions on content and conduct related to user safety, intellectual property, privacy, and authenticity. It serves to ensure a collaborative and safe environment for all users by prohibiting unlawful, harmful, or disruptive activities on the platform.