Legal
Incident / Breach Notice
How we communicate serious incidents affecting inEspect customers.
Last updated: September 2026
inEspect is a product of Easy Audit, an Egyptian company whose activity is digital solutions. References to “we”, “us”, or “the operator” mean Easy Audit, which provides and operates this platform.
This page summarises our incident communication commitment. It is written for customers and mirrors the tone of our Security page: present tense, no false reassurance.
1. What counts as an incident
Anything that suggests customer data has been reached, changed, or lost by somebody who should not have, and anything that stops customers using the platform for a prolonged period. Examples: cross-tenant disclosure; account takeover; data lost with no clean restore path; prolonged outage; a vendor breach that touches us.
Not an incident: a single failed login, one bounced email, a customer deleting their own record on purpose.
2. Who responds
The platform operator is the incident lead. Compensating control for a small team is the append-only audit log and session force-logout. Where an incident touches a specific customer, that customer's administrator is contacted directly.
3. Notification
If we confirm a personal-data breach affecting your company, we will notify the company contacts we have on file without undue delay, with facts we know and steps we are taking — before the picture is tidy, because your own regulatory clock cannot start until we tell you.
Where Egyptian law or other applicable law requires us to notify a supervisory authority (for example the Personal Data Protection Center), we will. Exact statutory clocks should be confirmed with counsel when first used; we do not invent certifications around the process.
We will not notify your data subjects on your behalf unless you ask us to in writing.
4. Your duties
This is an operational commitment for inEspect as processor/service provider. It does not replace your own incident, regulatory, or customer-notification duties as controller.
5. Detection gaps
We do not claim continuous intrusion detection or uptime monitoring as shipped product controls. Detection may rely on logs, daily operational checks, vendors, or customers telling us. That gap is also listed on Security.
6. Contact
Security or incident questions: help@inespect.com or Contact.