Mobile Device Security and Storage Media Management

2025.8

Matrak operates as a remote-first company where employees use laptops provided by the company and personal mobile devices for work purposes. Dedicated testing devices are also utilized as needed.

Matrak utilizes cloud-based storage repositories such as AWS EBS volumes and S3 buckets to store production data. All production data is accessed through web applications rather than being stored locally on devices.

As a cloud-based organization, Matrak does not manage physical media or backup tapes. Device management is handled by employees themselves under company security guidelines.

Policy Statements

Matrak policy requires that:

(a) Employees are responsible for implementing appropriate security measures on their devices according to company security guidelines.

(b) Critical data as defined in Matrak data classification model may not be stored locally on devices or removable media such as USB flash drives. All sensitive data access must be through approved web applications.

(c) Cloud-based data retention and disposal follows automated policies implemented in AWS storage systems according to Matrak's data retention schedule.

(d) Cloud storage resources are securely decommissioned through AWS-managed processes when no longer needed.

(e) Device security oversight is provided by the engineering team under CTO leadership, with employees responsible for implementing security measures on their own devices.