🎓 Privacy Awareness Training

1. Purpose

This document describes Nemu Inc.’s privacy awareness training provided to team members.

2. Scope

Applies to everyone who may have access to personal or customer data, including employees and long-term contractors.

3. Training Content

Privacy awareness topics are integrated into the security training program and include:

• Basic privacy principles (data minimization, purpose limitation).
• Handling of personal data in Supabase and Google Workspace.
• Rules around data sharing and disclosure.
• Process for responding to data subject requests and privacy inquiries.
• Escalation paths for suspected privacy incidents.

4. Frequency and Delivery

• Training is delivered during onboarding.
• Refresher training occurs periodically (e.g., annually) or when major policy changes occur.
• Updates may be communicated through internal channels.

5. Audit Evidence

• Training materials referencing privacy content.
• Attendance or completion logs.
• Example communications highlighting privacy practices.

6. Compliance Mapping

• SOC 2: P5.1
• ISO 27001:2013: A.7.2.2, A.18.1.4

Contact: support@mynemu.com
© 2025 Nemu Inc.. All rights reserved.