Free Cybersecurity Templates

This document outlines the privacy practices for GitHub Codespaces, detailing how user data, specifically telemetry from Visual Studio Code, is collected and managed. It explains how users can opt out of telemetry collection and references the broader GitHub Privacy Statement and Beta Previews terms for comprehensive details.

This document is the GitHub Privacy Statement, detailing how GitHub, Inc. and GitHub B.V. handle personal data. It outlines the types of personal data collected directly, automatically, and from third parties, as well as the purposes for processing this data. The statement also covers data sharing practices, international data transfers, and the privacy rights available to users, including specific provisions for EEA, UK, and various US state residents.

This document outlines Basecamp's commitment to its customers, promising long-term support and indefinite availability for its internet software and services. It assures users that products will be maintained with security updates and data safety, even if they transition to a legacy phase, provided terms of service are met. The policy aims to foster trust by ensuring product longevity and reliability.

This document is a comprehensive Cloud Service Agreement template, comprising an Order Form, Key Terms, and detailed Standard Terms, along with a Service Level Agreement. It outlines the terms for a customer's access and use of a provider's cloud service, covering aspects like subscription details, payment, data privacy, security, liability, and support. The template is designed to be customized with specific business and legal terms.

This document outlines a Clean Desk Policy designed to enhance security and confidentiality within an organization. It mandates that all sensitive and confidential information, whether physical or digital, must be properly secured or disposed of when workstations are not in use. The policy applies to all staff and aims to mitigate risks associated with unauthorized access or data loss.

This document provides a comprehensive list of GitHub's authorized subprocessors, detailing their roles in processing customer and personal data for Enterprise services. It outlines the specific services each subprocessor provides, along with their processing and corporate locations. The list ensures transparency and compliance with the GitHub Data Protection Agreement and GDPR.

This document provides a comprehensive list of GitHub's subprocessors, detailing their roles in processing customer and personal data for Enterprise customers. It outlines how GitHub ensures compliance with its Data Protection Agreement and informs users about updates to this list. Customers can also find information on how to receive notifications about changes to the subprocessor list.

This document is a Data Protection Policy designed to outline a company's commitment to safeguarding personal data and respecting individuals' privacy rights. It details how the company collects, processes, stores, and manages personal data in compliance with various global data protection laws. The policy also defines responsibilities for employees, contractors, and the Data Protection Officer, and addresses data subject rights and breach response procedures.

This document outlines GitHub's cookie policy, detailing how cookies are used to provide and secure their websites, analyze usage, and enhance user experience. It includes a comprehensive table listing various first-party and third-party cookies (from providers like Microsoft, Adobe, Google, Facebook, LinkedIn, etc.), their names, descriptions, and expiration dates. Users can find information on changing non-essential cookie preferences and linking to the Privacy Statement for more details.

This document outlines GitHub's policy and process for requesting the removal of private information from repositories. It defines what constitutes "private information" for removal purposes, details the steps involved in submitting and processing a removal request, and explains how disputes are handled. The policy focuses on high-risk content that poses a specific security threat to individuals or organizations.