Bonsai's Policy on Handling Data Breaches

Any Bonsai employee who suspects that a data breach has occurred must immediately notify the CTO and CEO. The CTO will form a response team to handle the incident.

The Bonsai response team will investigate all reported data breaches to confirm if a data exfiltration has occurred. Once confirmed, the response team will perform the following steps:

1. Notify impacted customers within an hour of confirmation by email
2. Coordinate with customers to identify the correct immediate course of action
3. Identify the root cause of the incident, and then work to remediate the issue

To report a data breach or suspicious activity, email us at support@bonsai.io with a description of events and observations.