Policies & compliance

Information Security Policy

This Information Security Policy ("ISP") defines how Servstead, LLC ("Servstead") protects the confidentiality, integrity, and availability of information processed by the Servstead platform, including optional financial data received through Plaid.

Plaid security questionnaire — information security program

Privacy Policy

This Privacy Policy describes how Servstead, LLC collects, uses, stores, and shares information when you use Servstead.

Plaid security questionnaire — privacy policy

Data Processing & Security

How we handle your business data, customer data, backups, subprocessors, and security responsibilities on Servstead.

Data processing & security practices

Data Retention & Deletion Policy

How long Servstead retains customer, business, and financial data — and how deletion requests are handled.

Plaid security questionnaire — data retention & deletion

User Consent & Authorization Policy

How Servstead obtains and records user consent for account registration, integrations, and financial data access.

Plaid security questionnaire — consumer consent

Access Control Policy

Defines how Servstead limits access to production systems, customer data, and financial integrations.

Plaid security questionnaire — access controls

Security Incident Response Plan

How Servstead detects, responds to, and communicates security incidents affecting customer or financial data.

Plaid security questionnaire — incident handling

Vulnerability Management Policy

How Servstead identifies, prioritizes, and remediates security vulnerabilities in application code, dependencies, and infrastructure.

Plaid security questionnaire — vulnerability management

Subprocessor List

Third-party service providers that process data on behalf of Servstead.

Vendor / subprocessor disclosure

Acceptable Use Policy

Rules for lawful, safe, and fair use of Servstead by account owners, managers, crew members, and portal users.