Synergy SKY Trust and Compliance Center 

Compliance & Trust

We design our products and services with security, privacy, and reliability in mind. This page provides an overview of our compliance approach, how we manage risk, and the controls we use to protect customer data. If you need documentation for a vendor assessment or procurement process, contact us and we’ll help you with the right materials.

Our compliance program is built to support customers with strict regulatory, contractual, and internal governance requirements. We maintain documented policies, perform regular risk reviews, and continually improve our security posture based on audits, customer feedback, and changes in the threat landscape.

Information Security Management

We operate an information security management program that covers people, process, and technology. Access to systems and data is restricted based on least privilege, and we use role-based controls to ensure users only have the permissions they need. Changes to production systems follow controlled processes with review, testing, and traceable approvals.

Security responsibilities are defined across teams, and employees receive security awareness training to help reduce human risk. We also maintain procedures for secure development, vulnerability handling, and operational monitoring.

Data Protection & Privacy

We only collect and process personal data when there is a clear business purpose and a lawful basis to do so. Data handling practices are designed to support privacy-by-design and privacy-by-default principles, including data minimization, defined retention periods, and safeguards for data subject rights requests.

Where applicable, we offer data processing terms and support customers in meeting their regulatory obligations. We also assess subprocessors and third-party services to ensure they meet our security and privacy expectations.

Audit Readiness & Customer Assurance

Customers often need evidence to support internal audits, risk committees, or security questionnaires. We can provide relevant documentation such as security overviews, policy summaries, architecture descriptions, and answers to standard assurance questionnaires under NDA where appropriate.

We continuously review our controls and update our documentation to reflect product changes and evolving requirements.

Incident Response & Business Continuity

We maintain an incident response process designed to identify, triage, contain, and remediate security events. Incidents are documented and reviewed, with corrective actions tracked to completion. If an incident affects customer data or service availability, we follow established communication procedures and provide timely updates.

Our business continuity approach includes backups, recovery planning, and operational monitoring to help ensure resilience and minimize downtime.

Responsible Disclosure

We welcome responsible vulnerability reports and take them seriously. If you believe you’ve identified a security issue, please contact our security team with details and steps to reproduce. We will acknowledge receipt, investigate promptly, and coordinate remediation and disclosure as appropriate.

Contact

For compliance documentation, security questionnaires, or privacy inquiries, reach out to our team. We’ll route your request to the right subject matter experts and respond as quickly as possible.