Legal

Incident Response Policy

HyperAgent operates a structured incident response lifecycle to reduce impact, preserve evidence, and continuously improve controls.

Last updated: February 26, 2026

1. Preparation

Runbooks define severity levels, escalation paths, on-call responsibilities, and communication templates.

2. Detection & Triage

Monitoring and alerting identify abnormal behavior. Events are triaged by impact, scope, and customer risk.

3. Containment

Compromised components are isolated, risky automations are paused, and emergency controls are applied.

4. Eradication & Recovery

Root causes are removed, systems are rebuilt or patched, and service is restored with heightened monitoring.

5. Communication

Relevant stakeholders are informed without undue delay according to legal and contractual obligations.

6. Post-Incident Review

A written review captures timeline, impact, corrective actions, and control improvements.

Escalation Channels

Security incidents can be reported to security@hyperagent.ch.

For contractual/legal notifications use legal@hyperagent.ch.

Download full policy: /docs/legal/incident-response-policy.md