Information Security Basic Policy

Last updated: 31 July 2026

Sumarii (“we”) establishes this Information Security Basic Policy to state our commitment to protecting information assets handled in the course of operating the Sumarii service.

Purpose

We handle customer meeting audio, transcripts, minutes, account data, and related information. The purpose of this policy is to protect the confidentiality, integrity, and availability of those information assets, to maintain the trust of our customers, and to comply with applicable laws.

Scope

This policy applies to:

  • All information assets we handle in operating Sumarii (including customer data, account data, and operational data)
  • The operator and anyone engaged to operate or support the service

Basic principles

  1. Compliance — We comply with Japan’s Act on the Protection of Personal Information (APPI) and other applicable laws and regulations, as well as contracts with customers.
  2. Risk-based protection — We identify information security risks and apply appropriate technical and organizational measures.
  3. Least privilege — Access to information assets is limited to what is necessary for operating the service and providing support.
  4. Customer data purpose limitation — Customer meeting content is not used to train AI models, and is not reviewed by staff except for support at the customer’s request or investigation of a system fault.
  5. Incident response — If an information security incident is confirmed, we take prompt containment measures and notify affected users as described in our security checklist.
  6. Continuous improvement — We review and improve our information security measures on an ongoing basis.

Roles and responsibility

The operator of Sumarii is responsible for establishing, implementing, and maintaining this policy and related security practices. Day-to-day operation of the service is carried out under that responsibility.

Education and awareness

Anyone engaged in operating or supporting the service is expected to understand this policy and handle information assets accordingly.

Details of how we protect data in the product, including storage location, subprocessors, encryption, and deletion, are described in:

Contact

Questions about this policy: help@sumarii.com

Establishment

Established: 31 July 2026
Operator: Sumarii