Skip to main content
On expiry of the retention period, or on client request, all data – including originals, copies, derivatives and backups – is securely deleted/destroyed within 30 days using industry-standard secure deletion: NIST SP 800-88 ‘Clear’ media sanitization and cryptographic erasure of the encryption keys.
On expiry of the retention period, or on client request, all data – including originals, copies, derivatives and backups – is securely deleted/destroyed within 30 days using industry-standard secure deletion: NIST SP 800-88 ‘Clear’ media sanitization and cryptographic erasure of the encryption keys. Written certification of destruction is provided on completion, and the client may request a data backup prior to deletion. Learn more: Empuls Help Centre

What security standards does Empuls follow to protect data?

Empuls is certified against ISO 27001:2022 and aligned with NIST CSF 1.1, with AES-256 encryption, MFA, and annual third-party audits protecting all…

Has encryption has bee implemented for data at rest and in motion? Is the

Yes. Data is encrypted both at rest and in transit. At rest: AES-256 encryption is applied to all stored data; encryption keys are managed via AWS Key…