What is a breach notification SLA?
A breach notification SLA (service level agreement) is a committed deadline for telling customers about a security breach that affects their data. Common windows are 24, 48, or 72 hours after confirmation. The 72-hour figure comes from the GDPR.
What the buyer is really asking
The buyer wants a number: how many hours after you confirm a breach they will hear from you. This usually becomes a contract term, so only promise a window you can meet.
Other ways buyers ask it
Every one of these wants the same answer:
- “What is your SLA for notifying customers of a breach?”
- “How quickly will you notify us of a security incident?”
- “Will you notify us within 72 hours?”
Evidence to have ready
- The notification window in your incident response plan
- The matching commitment in your DPA or terms
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.