Free Cybersecurity Templates

This document provides a comprehensive list of subprocessors authorized by GitHub to handle customer and personal data for its Enterprise customers. It outlines the specific services each subprocessor provides and their geographical locations, ensuring transparency in data processing practices. This list is governed by the GitHub Data Protection Agreement and is updated regularly.

This Privacy Statement outlines how GitHub, Inc. or GitHub B.V. handles "Personal Data" when users interact with its websites, applications, and services. It details the types of data collected directly, automatically, and from third parties, the purposes for processing this data, and how it may be shared. The document also explains user privacy rights, international data transfer mechanisms like the DPF, and specific provisions for US state residents.

This document outlines GitHub's authorized subprocessors who process customer and personal data for its Enterprise customers. It provides details on each subprocessor's name, description of processing activities, and their corporate and processing locations. The list is governed by the GitHub Data Protection Agreement and is updated periodically.

This Privacy Policy outlines how 37signals LLC collects, uses, secures, and discloses user data across its various products like Basecamp and HEY. It details the types of information gathered, user rights regarding their data, and practices concerning data retention and international transfers. The policy emphasizes that user data is never sold and explains the company's approach to legal requests for information.

This document is a Business Associate Agreement (BAA) template, designed to ensure compliance with HIPAA regulations for handling Protected Health Information (PHI). It outlines the responsibilities of a Provider (Business Associate or subcontractor) and a Company (Covered Entity or Business Associate) regarding the use, disclosure, and safeguarding of PHI. The template includes key terms for customization and incorporates standard terms by reference.

This document outlines GitHub's use of cookies, detailing their purpose, function, and expiration. It explains how GitHub and various third-party providers utilize cookies to secure websites, analyze usage, and enhance user experience, while also linking to their Privacy Statement for more information and cookie preference management.

This Data Protection Policy outlines a company's commitment to safeguarding personal data and respecting individual privacy rights. It details how personal data is collected, processed, stored, and managed in compliance with various data protection laws, including GDPR, CCPA, PDPA, and Australia's Privacy Act. The policy also defines responsibilities for employees, contractors, and the Data Protection Officer, and outlines data subject rights.

This document outlines a Clean Desk Policy for a company, designed to enhance security and confidentiality. It mandates that all sensitive information, whether in physical or digital form, must be properly secured or disposed of when workstations are left unattended. The policy applies to all permanent, temporary, and contracted staff to mitigate risks of unauthorized access, loss, or damage to information.

This document outlines GitHub's policy and process for requesting the removal of private information from repositories. It defines what constitutes 'private information' for the purpose of this policy, focusing on content that poses a specific security risk, such as exposed access credentials or sensitive personal data. The policy details the steps for submitting a removal request, the information required, and how GitHub processes such requests, including user disputes.

This document is a Data Processing Agreement (DPA) template designed to supplement an underlying agreement. It outlines the terms under which a Provider processes personal data on behalf of a Customer, ensuring compliance with various data protection laws such as GDPR, UK GDPR, and CCPA. The DPA covers key aspects like subprocessors, security measures, restricted transfers, and liability.