Levels of Confidentiality

Information Classification

We classify information into different levels to guide appropriate sharing.

Public

Information that can be shared with anyone, including competitors and the general public.

Examples:

• Marketing materials
• Published blog posts
• Public documentation
• Job postings

Sharing: No restrictions

Internal

Information for Selora Homes team members only.

Examples:

• Internal processes and workflows
• Most handbook content
• Team discussions
• Non-sensitive project plans

Sharing: Selora Homes team members only; don’t share on social media or with people outside the company

Confidential

Sensitive business information that should be carefully protected.

Examples:

• Financial data
• Customer lists and data
• Pricing strategies
• Unannounced product plans
• Acquisition discussions

Sharing: Only with team members who need to know; requires explicit approval to share

Restricted

Highly sensitive information with serious consequences if leaked.

Examples:

• Customer security credentials
• Legal matters
• HR disciplinary actions
• Acquisition terms before public announcement

Sharing: Minimal distribution; usually handled by leadership only

Default to Open

When in doubt, default to Internal rather than more restrictive levels. We value transparency and trust our team.

Why Default to Open

Better Decision Making: More information leads to better decisions

Faster Execution: People don’t need to wait for permission to access information

Builds Trust: Transparency creates trust within the team

Reduces Duplication: Everyone can see what others are working on

Protecting Confidential Information

Security Practices

Use Strong Passwords: Use a password manager

Enable 2FA: On all work accounts

Lock Your Computer: When stepping away

Report Incidents: Immediately report any suspected data breach

Customer Data

Customer data requires special protection:

Access Controls: Only access customer data when necessary for your job

No Sharing: Never share customer data outside approved systems

Data Minimization: Only collect and retain necessary customer data

Comply with Regulations: Follow GDPR, CCPA, and other data protection laws

What to Do If Unsure

If you’re unsure whether you can share something:

1. Check this guide
2. Ask your manager
3. Err on the side of caution