Privacy policy

Updated: 11/09/2026 · Service 111 Business Computing Ltd. (SrvIT), operator of TrustRMM · Aligned with Amendment 13 to the Israeli Protection of Privacy Law

1. General

This policy explains what information is collected on trmm.co.il (the "Site") and within the TrustRMM service (the "Service"), for which purposes, to whom it may be disclosed, and what your rights are. It is written in accordance with the Israeli Protection of Privacy Law, 5741-1981, including Amendment 13 that entered into force in August 2025, and the Protection of Privacy Regulations (Data Security), 5777-2017.

The Site and the Service are owned and operated by Service 111 Business Computing Ltd., company no. 514787365, 4 HaTe'ena St., Mazkeret Batya 7684624, P.O. Box 5272, Israel (the "Company", "we"). TrustRMM is a service brand of the Company.

2. Officers

• Data Protection Officer (DPO): Lior Levi, , +972-72-2281396. The DPO is the contact point for privacy requests and for the Israeli Privacy Protection Authority.
• Chief Information Security Officer (CISO): Lior Levi, , +972-72-2281396. Responsible for the technical and organisational security measures of the Company and the Service, and the contact point for reporting a security incident.

3. Information collected on the Site

• Contact and demo request forms: name, business name, phone, e-mail and the content of your message. These are the minimum details needed to get back to you. Providing them is voluntary; without contact details we cannot reply.
• Technical browsing data: IP address, browser and operating system, pages viewed and access times, as recorded in server logs for security and operations. The Site's security software also records failed login attempts, blocked requests and repeated requests for pages that do not exist, and an address that does so may be blocked temporarily.
• Protection network: the Site is served through Cloudflare's protection and acceleration network, which filters malicious traffic before it reaches the server. For that purpose the visitor's IP address and request data pass through Cloudflare's servers, including outside Israel, under Cloudflare's data protection terms. The content of form submissions is not stored by Cloudflare. Cloudflare also provides a basic visit count (Web Analytics) that uses no cookies and does not identify an individual visitor.
• Browser preferences: language choice, display mode (light/dark) and accessibility settings are kept in your own browser only and are not sent to us. The Site sets no advertising cookies.
• Traffic measurement (Google Analytics): to learn which pages help visitors we use Google Analytics 4 in aggregated-measurement mode only: advertising, ad personalisation and "Google signals" are switched off, and no name, phone number or enquiry content is passed to Google. The tool sets a statistical cookie in your browser and sends Google technical browsing data (page, time, browser type and a truncated IP address), including to servers outside Israel, under Google's privacy terms. A browser that signals Do Not Track or Global Privacy Control does not load the tool at all and no cookie is set. You can also block it with Google's opt-out add-on (tools.google.com/dlpage/gaoptout).
• Handling enquiries: a form submission is sent to the TrustRMM sales mailbox and logged in the company's enquiry management system, so that a representative can get back to you and the reply is documented.

We do not collect special-sensitivity information on the Site, and the Site is not intended for minors.

4. Information processed by the Service

TrustRMM is a remote monitoring and management (RMM) service for the computers, servers and network equipment of our business customers. A software component (agent) is installed on the customer's devices and reports technical and operational information to the platform, which is hosted in Israel, including:

• Device identity: computer name, manufacturer and model, serial number, network addresses.
• System state: operating system and updates, installed software, services and processes, resource usage, event logs and alerts.
• User names signed in to the device, as reported by the operating system.
• Support records: remote-session times, technician identity, scripts executed and their results.

The agent does not log keystrokes, does not read the content of files and documents, and does not view the screen unless a support session is deliberately started, which is recorded in the system. The customer decides which devices are enrolled and may remove a device at any time.

5. Who owns the data and what is our role

Data collected from the customer's devices belongs to the customer, who is the "database controller". The Company acts as a "holder" (processor) and processes the data solely to deliver the Service, under the service agreement and the customer's instructions, and for no other purpose. Where the customer's devices contain personal data about its employees or its own customers, the duty to inform them and to comply with the law towards them rests with the customer, and we assist as needed.

6. Purposes of use

• Responding to enquiries and quotes, managing the engagement and billing.
• Operating the Service: monitoring, alerts, security updates, preventive maintenance and remote support.
• Securing the data and systems, detecting and preventing misuse.
• Professional records and continuity of service.
• Compliance with legal obligations.

We do not use the data for marketing mailings without explicit consent, which can be withdrawn at any time.

7. Disclosure to third parties

We do not sell or rent personal data. Data may be disclosed only:

• To sub-processors required to operate the Service (server hosting in Israel, e-mail services, remote-control tools), bound to us by confidentiality and data-security agreements and processing data only on our instructions.
• To the providers of the Site itself: Cloudflare (protection network) and Google (aggregated traffic measurement), as described in section 3. They receive technical browsing data only, never the content of enquiries.
• Under a court order or a lawful demand of a competent authority.
• On an explicit, verified instruction of the customer who owns the data.

The TrustRMM platform and monitoring data are stored on servers in Israel. Any transfer outside Israel, if required (for example, cloud services of international vendors), is made only under the data-transfer regulations and with adequate safeguards.

8. Data security

We apply technical and organisational security measures in line with the Data Security Regulations and the principles of ISO 27001, including: encrypted communication between the agent and the platform and between the visitor and the Site (TLS), multi-factor authentication for staff, least-privilege access management, action logging, security monitoring, encrypted backups and periodic reviews. Our staff and vendors are bound by confidentiality. In the event of a severe security incident we act according to the statutory reporting duties and inform the affected customers.

9. Retention

• Site enquiries: up to 24 months from the last handling, unless they became an engagement.
• Monitoring data from the Service: for the duration of the Service and up to 90 days after termination or device removal, except billing records and documentation required by law.
• Server and security logs: up to 12 months. Temporary block records of the security software: up to 90 days.

10. Your rights

Any person whose personal data we hold may request to review, correct or delete it under sections 13-14 of the Law. Requests should be addressed to the DPO at the details above; we reply within 30 days. A refusal is given in a reasoned notice as required by law. For data the Company holds on behalf of a customer, the request is forwarded to the customer as the controller, and we act on its instructions.

You may also contact the Privacy Protection Authority at the Israeli Ministry of Justice.

11. External links

The Site may link to other websites (including srvit.co.il). This policy does not apply to them; please review their own privacy policies.

12. Updates

This policy is updated from time to time to reflect changes in law, technology or the Service. The binding version is the one published on this page, with the last update date shown at the top. Material changes are communicated to customers directly.

13. Contact

Questions about this policy: Lior Levi, Data Protection Officer, , +972-72-2281396; or phone 1-700-722-111, WhatsApp +972-72-2788080; or via the contact form.