Canada Privacy Commitment

As a data processor, Netskope processes personal information on behalf of our clients and in accordance with their instructions. Our key responsibilities as a processor include:

• We process personal information on behalf of our clients under clear contractual agreements, ensuring that all processing is conducted lawfully, fairly, and transparently.
• We implement robust technical and organizational measures to safeguard personal information against unauthorized access, alteration, or loss.
• We assist our clients in meeting their compliance obligations, including responding to data subject requests and ensuring timely reporting of any privacy breaches.

As a data controller, Netskope is responsible for processing personal information related to our employees. In this capacity, we ensure that:

• We collect and process employee information solely for legitimate purposes, such as recruitment, payroll, and compliance with employment laws.
• We provide transparency by informing employees about how their information is used and ensuring their rights to access and correction.
• Appropriate measures are in place to protect employee information from unauthorized access or loss.
• We continually train our staff and review internal policies to ensure compliance with PIPEDA and promote a culture of data protection.
• Any privacy breaches are addressed promptly and effectively, with required notifications to affected individuals and, where necessary, the OPC.