Compliance · Synthetic Property 1
Audits, Incidents & Privacy Requests Coordinate audits and evidence
Anyone can report an incident. Security and privacy incidents start with scope unknown, which is treated as the worst case until someone confirms what was affected. Confidential incidents show only to the reporter, the owner and compliance.
Number Incident Kind Severity Scope Owner Notice by Status INC-0001 Shared front desk login used from an unknown device Security Critical provisional Unknown Jordan Stubbs 2026-10-30 · in 1 day Triage INC-0002 Complaint about a guest's behaviour toward staff Conduct Medium Contained Sasha Kindwell — Remediating INC-0003 Wet floor near the pool entrance Safety Low Contained — — Reported
INC-0001 · Shared front desk login used from an unknown device ✕ Notice is due by 2026-10-30 14:00 UTC (72 hours after the report) unless it is confirmed nobody was affected. Not sent yet. A person sends the notice and records it here. Platform AI can draft it.
Status Triage
Kind Security
Severity Critical provisional: reported as High, treated as Critical until what was affected is known
Confidential Yes: reporter, owner and compliance only
Occurred 2026-10-27
Reported by Jordan Stubbs
Owner Jordan Stubbs
What was affected Unknown The shared front desk account signed in from a device nobody recognises. Password has been changed. Not yet known whether guest records were opened.
Fixes None yet. Every fix needs an owner.
Timeline 2026-10-27 14:00 · Jordan Stubbs: Reported. 2026-10-27 16:00 · Jordan Stubbs: Owner Jordan Stubbs, severity High. Actions Add a note Triage Confirm what was affected Record containment Add a fix Record that notice was sent Close History 2026-10-27 16:00 incident.triage · Jordan Stubbs 2026-10-27 14:00 incident.report · Jordan Stubbs