TAP Innovations, LLC — Incident Response & Breach Notification Policy
This policy describes how TAP Innovations, LLC prepares for, detects, responds to, and communicates about security incidents affecting the FlowIQ platform, Customer Data, or related Services — consistent with GDPR, UK GDPR, CCPA/CPRA, and U.S. state breach notification laws.
We maintain a designated incident response function led by security engineering and supported
by executive sponsorship. Roles, responsibilities, escalation paths, and external advisors are
documented internally and exercised through periodic tabletop and live drills.
| Severity | Description |
|---|---|
| Sev 1 — Critical | Confirmed or likely Personal Data Breach affecting many customers, or major loss of platform availability and Customer Data integrity. |
| Sev 2 — High | Confirmed material security incident with limited customer impact, or significant operational degradation. |
| Sev 3 — Moderate | Contained security incident with limited or no Customer Data impact. |
| Sev 4 — Low | Event of interest with no confirmed compromise. |
Where we act as a processor on behalf of customers, we will notify the customer without undue delay and generally within 48 hours of becoming aware, to allow the customer sufficient time to meet their own applicable notification obligations.
Where required by applicable U.S. law (including state breach notification statutes and CCPA/CPRA), we will notify relevant state attorneys general, regulators, and affected individuals as required. Where we act as a processor on behalf of customers, we will support customers in meeting their own notification obligations.
During significant incidents, we provide updates through email and a status page where
available. Final post-incident summaries are shared with affected customers and, where
appropriate, made available more broadly
We document incidents and responses in line with applicable legal and regulatory expectations.Summary information may be made available to affected customers on request, subject toconfidentiality and security considerations
Post-incident reviews drive concrete improvements in detection, controls, and processes. Thesecurity program tracks corrective actions through closure and reports periodically to executive leadership.
Contact our security team immediately if you suspect a breach or security issue.
Mailing Address
539 West Commerce Street, #249Dallas, TX 75208
Office Address
6210 North Belt Line Road, Suite 150
Irving, TX 75063
Phone
