We have an Access Control policy in place that specifies how to manage access control to all system components and sensitive information in the organization. Policies governing acceptable use or access to subscriber data and metadata is included in the CaseWare privacy policy (https://www.caseware.com/generic/privacy-policy). CaseWare collects, uses and discloses information only for the following purposes: To verify your identity To provide you with the CaseWare Cloud Services To contact you for the purposes of product information, service updates, billing notifications, or notifications relating to the CaseWare Cloud Services To monitor and/or improve system usage, server and software performance To assist with technical support issues To comply with any laws, regulations, court orders, subpoenas or other legal process of investigation and to protect CWC, its Affiliates and other individuals from harm To improve and enhance CWC Service offerings