incident.io: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-10-29 09:01 UTCtrust.incident.io

Summary

The Trust page stopped listing asset disposal, disaster recovery planning and testing, data retention procedures, and data classification controls. It added contractor confidentiality acknowledgments, a whistleblower policy, and board oversight briefings; these alter the security assurances customers can review, but do not establish that underlying practices changed.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

~~Struck in red~~ is what incident.io removed; blue is what they added. Muted text is unchanged context.

Removed#1

…View ‹count› more Infrastructure security controls Organizational security ~~Asset disposal procedures utilized~~ Anti-malware technology utilized Employee background checks performed View…

…View ‹count› more Infrastructure security controls Organizational security removed Anti-malware technology utilized Employee background checks performed View…

Added#2

…security Anti-malware technology utilized Employee background checks performed nothing here View ‹count› more Organizational security controls Product security…

…security Anti-malware technology utilized Employee background checks performed Confidentiality Agreement acknowledged by contractors View ‹count› more Organizational security controls Product security…

Changed#3

…and system monitoring procedures established Internal security procedures ~~Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained~~ View ‹count› more Internal security procedures controls Data…

…and system monitoring procedures established Internal security procedures Cybersecurity insurance maintained Whistleblower policy established Board oversight briefings conducted View ‹count› more Internal security procedures controls Data…

Removed#4

…more Internal security procedures controls Data and privacy ~~Data retention procedures established~~ Customer data deleted upon leaving Data classification policy…

…more Internal security procedures controls Data and privacy removed Customer data deleted upon leaving Data classification policy…

Removed#5

…procedures established Customer data deleted upon leaving Data ~~classification policy established~~ Data collected Customer personally identifiable information Credit card…

…procedures established Customer data deleted upon leaving Data removed Data collected Customer personally identifiable information Credit card…

Compared with the previous archived version (#9684 to #10515). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 28
Before captured 09:00 UTC
In the 2026-10-28 checkpoint, timestamped by FreeTSA and DigiCert on Oct 29, 00:43 UTC. Record hash c8bf63a8733dcc4f…
Download proof
Oct 29
After captured 09:01 UTC
In the 2026-10-29 checkpoint, timestamped by FreeTSA and DigiCert on Oct 30, 00:41 UTC. Record hash 1335521553d47e96…
Download proof

History of this page

Thursday, October 29

1 page change

Content changed
09:01Page change
Trust pagechangedthis change
The Trust page stopped listing asset disposal, disaster recovery planning and testing, data retention procedures, and data classification controls. It added contractor confidentiality acknowledgments, a whistleblower policy, and board oversight briefings; these alter the security assurances customers can review, but do not establish that underlying practices changed.

Wednesday, October 28

1 page change

Content changed
09:00Page change
Trust pagechanged
incident.io’s Trust page added listings for asset disposal, disaster recovery planning and testing, data retention, and data classification. Listings for contractor confidentiality acknowledgment, a whistleblower policy, and board oversight briefings disappeared. These changes affect published security assurances but do not establish whether the underlying practices changed.

Cite this

Trust page changed on incident.io’s Trust page, changed 2026-10-29 09:01 UTC (change 2 of 2).

Title: Trust page changed
Vendor: incident.io
Date: 2026-10-29 09:01 UTC
URL: https://rewindex.com/change/p10515

All incident.io changes incident.io profile Markdown JSON