Data Classification Scheme

Classification of the different data risk profiles helps us to design systems that meet our business needs, reduce operational risk, and serve our customers responsibly and ethically. Vouchery uses the following Data Classification Scheme to define the confidentiality of any data in our organization:

Classification	Description
Sensitive	This is the highest level of data security classification and requires the highest level of security controls and limited access. Secret data may represent an existential threat to the company, its customers, or end users, and/or would cause exceptionally grave damage should it be compromised.
Confidential	Restricted data, if compromised, would cause damage to Vouchery, our customers, end users, employees, former employees, vendors, and/or third parties.
Private	Private data is intended for internal use only. Unauthorized disclosure, alteration, or destruction of that data could result in a moderate impact to Vouchery, its customers, and/or end users.
Proprietary	Proprietary data is data that is disclosed outside the company on a limited basis or contains information that could reduce the company's competitive advantage.
Public	Public data is intended for external release, use by non-employees, or has been downloaded from publicly available sources free of charge. Unauthorized disclosure of Public data would result in little or no risk to Vouchery, its customers, and/or end users.