Compliance

NextUp is a standalone desktop application and does not provide IaaS, PaaS, or SaaS services. 

It integrates with:

• New Relic (SaaS) for monitoring and logging. New Relic's security certifications can be found here.
  ISO 27001 , FedRamp

• Google Calendar / Microsoft Outlook (SaaS) as sources of information. Security certifications for Google Cloud are available here, and for Microsoft here.

• No IaaS or PaaS providers are used for hosting, as the application runs locally on user devices and interacts directly with Google provided calendar API's or Microsoft provided calendar API's.

Additional Security Information

Are you concerned about your privacy and security? Well, you should be! Security is most certainly very important and has become a modern reality we cannot escape from. Whenever you enter data into your Calendar Application you should be mindful about the information you enter. It is therefore advisable not to enter sensitive information, regardless whether you use NextUp or not.

The NextUp App interacts directly with Google Calendar API and or Microsoft Graph API directly to retrieve Calendar information, and New Relic API for logging and monitoring purposes. No other services or servers are used, making NextUp more secure.

Some key aspects about how NextUp treats your data.

• NextUp operates without requesting or requiring any personal information. (No NextUp account required)

• Your calendar information remains on your machine, and Google or Microsoft. There is no intermediate services or servers that NextUp makes use of other than the services mentioned here.

• Monitoring and logging information, is accessible to NextUp for 30 days.

• NextUp only requires read access to your calendar information, in order to display and provide timely notifications.
  
  

Security Measures

• When you sign in to NextUp, you allow it to read your calendar information. A temporary token is used to access your calendar and send timely notifications. This token is securely stored on your device and encrypted using your Windows credentials—NextUp never sees or stores your credentials.

• NextUp is installed via the Microsoft Store as an MSIX package, which offers added security compared to traditional installers, including trusted distribution and built-in Windows protections.

If your Windows Device Is Compromised

• Contact a trusted IT professional immediately.

• Change your Windows password to a strong, secure one. Never share it—even once.

• Sign out of NextUp, then sign back in to refresh your security settings.