Data Protection
Overview
Data protection is at the core of MyQ Roger's approach to security, ensuring that every aspect of its cloud-based printing and scanning solution adheres to the highest industry standards. A fundamental principle of MyQ Roger is that no print or scan job data is ever transferred through its servers. Instead, MyQ Roger strictly limits its data collection to essential metadata, such as job file names, file sizes, and page count information. This ensures operational efficiency while safeguarding user privacy.
Multi-Tenant Cloud Security
As a multi-tenant cloud product, MyQ Roger provides customers with an environment that is logically isolated to prevent cross-tenant data exposure.
To provide resilience, MyQ Roger relies on Azure SQL and Azure Cosmos DB, both of which offer built-in security features such as data encryption at rest and in transit, automated threat detection, and access monitoring. The cloud infrastructure undergoes continuous security assessments to mitigate risks associated with multi-tenant environments.
Encryption & Secure Communication
Security is embedded at every level of MyQ Roger’s operations. All communication between clients, cloud services, and printers is encrypted using TLS (Transport Layer Security) to prevent unauthorized access or tampering.
To further strengthen security, publicly trusted Certificate Authorities (CAs) sign all certificates used within MyQ Roger, ensuring the highest level of trust. Additionally, certificates are rotated every three months, reducing the risk of potential compromise and maintaining compliance with security best practices.
Compliance & Identity Management
MyQ Roger aligns with internationally recognized security standards, holding ISO 27001 certification, which demonstrates its commitment to implementing robust information security management practices.
To enforce strict access controls, Role-Based Access Control (RBAC) is implemented, ensuring that users are granted only the permissions necessary for their role. This minimizes exposure to sensitive data and reduces the risk of accidental or intentional misuse.
GDPR Compliance
Ensuring compliance with the General Data Protection Regulation (GDPR) is a top priority for MyQ Roger. In accordance with GDPR principles, MyQ Roger follows stringent data protection measures to safeguard user privacy:
Data Minimization: Only essential metadata is collected, eliminating the risk of storing sensitive user documents.
User Rights & Control: Users have the ability to request access, correction, deletion, or anonymization of their personal data, as mandated by GDPR.
Transparency in Data Processing: Clear and concise privacy policies outline how metadata is handled, stored, and protected.
Secure Data Storage: All data is encrypted at rest and in transit, ensuring full compliance with GDPR’s strict security requirements.
Anonymization Measures: When required, MyQ Roger implements data anonymization techniques to ensure that personal data can no longer be attributed to a specific user, reinforcing privacy protection.
These measures ensure that MyQ Roger fully aligns with GDPR's core requirements, giving users control over their personal data while maintaining a secure and compliant environment.
Data Backups
To protect against data loss and ensure service reliability, MyQ Roger implements a comprehensive data backup strategy. This includes:
Automated Backups: Regularly scheduled incremental and full backups ensure that data remains recoverable in the event of an incident.
Secure Storage: Backups are encrypted using AES-256 encryption, ensuring that even in the unlikely event of unauthorized access, data remains unreadable.
Retention Policies: Backups are stored for a defined period in alignment with compliance requirements, allowing for efficient recovery in case of system failure or disaster recovery scenarios.
Integrity Testing & Verification: Regular backup integrity tests are conducted to confirm that stored backups are functional and reliable, ensuring seamless data restoration when needed.
By implementing these robust security, compliance, and backup measures, MyQ Roger provides a secure, private, and highly efficient cloud-based printing and scanning solution that meets the highest data protection standards in the industry.