Brazil Privacy Commitment

As a data processor, Netskope processes personal data on behalf of our clients and in accordance with their instructions. Our key responsibilities as a processor include:

• We process personal data on behalf of our clients under clear contractual agreements, ensuring that all processing is conducted lawfully, fairly, and transparently.
• We implement robust technical and organizational measures to safeguard personal data against unauthorized access, alteration, or loss.
• We assist our clients in meeting their compliance obligations, including responding to data subject requests and ensuring timely reporting of any data breaches.

As a data controller, Netskope is responsible for processing personal data related to our employees. In this capacity, we ensure that:

• We collect and process employee data solely for legitimate purposes, such as recruitment, payroll, and compliance with employment laws.
• We provide transparency by informing employees about how their data is used and ensuring their rights to access, correction, and deletion.
• Appropriate measures are in place to protect employee data from unauthorized access or loss.
• We continually train our staff and review internal policies to ensure compliance with the LGPD and promote a culture of data protection.
• Any data breaches are addressed promptly and effectively, with required notifications to the ANPD and affected individuals when applicable.