Transparency and Accountability

Service Levels and Support Commitments

Upskroll operates with a defined monthly uptime target and structured severity classifications for incidents. Support channels, escalation pathways, and service credit mechanisms are clearly established to provide operational certainty. Planned maintenance windows and emergency procedures are communicated transparently.

Data Breach and Incident Response

Upskroll maintains a structured incident management framework. If a security incident or data breach is suspected, defined processes govern:

• Detection and reporting
• Containment and investigation
• Remediation
• Regulatory assessment
• Notification obligations

Eligible data breaches are handled in accordance with Australian legal requirements. Post-incident reviews are conducted following major events to strengthen controls and reduce recurrence risk.

Risk Management and Business Continuity

Upskroll operates within a formal risk management and business continuity framework. Critical services have defined recovery objectives, and encrypted backups are performed daily for key data. Disaster recovery procedures are documented and periodically tested. Business Impact Analyses are reviewed regularly.

Continuity is structured, not improvised.

Vendor and Subprocessor Oversight

Third-party providers with access to systems or customer data are subject to structured due diligence and contractual safeguards. Vendors are risk-rated based on data sensitivity and access levels. Contracts include confidentiality, security obligations, breach notification requirements, and defined exit procedures. Supply chain oversight forms part of the overall governance model.

Financial Governance

Upskroll operates under structured financial management controls designed to ensure transparency and accountability. Billing processes, payment terms, dispute resolution timelines, and approval controls are formally defined.

Commercial clarity is part of trust.

Ethical Conduct and Whistleblower Protections

Upskroll maintains a formal Code of Conduct and whistleblower reporting framework. Misconduct, privacy concerns, financial irregularities, or compliance risks can be reported through defined channels. Confidentiality and protection against retaliation are upheld. Professional conduct, respectful workplace standards, and legal compliance are organisational expectations.

Governance Oversight

Upskroll maintains a consolidated governance framework mapping operational controls to privacy, security, consumer law, risk management, and continuity standards. Policies are reviewed at least annually or upon material change. Oversight is maintained at Director level to ensure accountability and alignment with organisational risk posture.

Trust is built through transparency, documented controls, and structured accountability. Upskroll's legal and governance framework exists to provide operational confidence — not just contractual protection.