Data Privacy - Cyberity

Last updated: July 2026

Template notice: this page is a plain-language starting point and is not yet legal advice. Have it reviewed by your counsel/DPO before publishing, and align the specifics with your actual data flows.

Cyberity (operated by iWoWSoft) builds compliance and IT-operations governance software. Trust is the product, so we keep data collection minimal and put you in control of where your evidence lives.

What we collect

Account & contact data — name, work email, organisation, and role for people who sign up or contact us.
Operational evidence — verification results, DR-drill outcomes, and audit metadata generated by the platform. This is about your systems, not your backup contents.
Usage & diagnostics — basic logs needed to run the service securely and reliably.

We do not copy your backup data or business files into our systems in order to verify them — verification runs where your data lives (see below).

How we use it

To provide and secure the service, and to generate your compliance evidence.
To respond to enquiries, provide support, and send service-related messages.
To meet legal, audit and security obligations.

We don't sell your data, and we don't use your operational evidence for advertising.

Your data stays in your control

Cyberity is designed so sensitive data need never leave your environment:

On-prem verification. A lightweight agent checks backups where they live and reports status/evidence, not contents.
Bring-your-own-cloud. You can keep evidence and backups in your own cloud account; we hold minimal metadata.
Regulated recovery. DR drills for sensitive workloads can run in your own compute so data never leaves your control.

Storage, residency & security

Where we do host data, it is encrypted in transit and at rest, access is role-based and logged, and evidence records are written to a tamper-evident, cryptographically-signed ledger. We can discuss regional data-residency options for regulated customers.

Retention

We keep personal data only as long as needed for the purposes above or as required by law. Evidence retention is configurable to match your compliance framework; you can request deletion subject to legal-hold obligations.

Your rights

Depending on your jurisdiction (e.g. GDPR, Malaysia's PDPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, contact us and we'll respond within the timeframes required by applicable law.

Cookies

The public marketing site uses only what's necessary to function; it does not run third-party advertising trackers. The application may use essential cookies for authentication and security.

Contact us about privacy

For any privacy or data-protection question, or to make a data request, email privacy@cyberity.io or visit our contact page.