Hercules Incident Response Summary
Last updated: 2026-03-17 (UTC)

1. Detection: health checks, telemetry anomalies, and customer/internal reports are triaged by on-call operations.
2. Notification: confirmed customer-impacting incidents are communicated to affected customer contacts. For personal data breaches, affected tenant-controllers are notified within 72 hours of Hercules becoming aware of the breach, in accordance with NDPA 2023 Section 40.
3. Regulatory notification: the tenant-controller, as data controller, is responsible for any required notification to the Nigeria Data Protection Commission (NDPC) and to affected data subjects. Hercules provides full cooperation and supporting documentation on request.
4. Escalation: engineering and security leads coordinate containment; leadership and compliance stakeholders are engaged per incident class.
5. Closure: post-incident summary records timeline, root cause, remediation, and follow-up actions.

Contact: support@herculessuite.io