Company profile & settings

What this module is for

My Company holds the settings that describe your company to NextIT. It covers your company identity, the personal information you handle, your frameworks, your risk preferences and your notifications. The privacy policy generator reads some of these settings.

Before you start

• Only an Admin can change My Company.
• An Auditor can read every section but cannot change it.
• A User does not see My Company.
• Open it from Company Information on the dashboard.

How to change a setting

1. 1
   Open My Company

   Select Company Information on the dashboard.

2. 2
   Choose a section

   Select the section you need in the My Company panel.

3. 3
   Change the fields and save

   Change the fields, then select the save button of the section. In Profile, the button is Save changes.

What you see

My Company has nine sections. The table shows who can see and change them.

Who can do whatMy Company

AdminViews and edits every section

AuditorViews every section, read-only

UserDoes not see My Company

Profile

The Profile section holds company information: Company Name, Phone, Website / Domain, Industry, Description and Logo URL. It also holds your legal name, business number, head office and province. Enter the Privacy Officer / Responsible Person: name, job title, email, phone and mailing address. This is the person in charge of privacy in your company.

PI Registry

The PI Registry (Personal Information Registry) lists the personal information you collect. For each item, record why you collect it and how long you keep it. The AI Privacy Policy & Terms Generator reads this registry. A privacy policy must tell people what you collect, why and for how long, so complete the registry first.

Compliance

The Compliance section lists the applicable frameworks. Turn each framework on or off. Your readiness appears here too. The Compliance report asks you to choose a framework. If none is on, it offers Manage frameworks.

Risk Preferences

The Risk Preferences section has three settings:

• Risk tolerance: how much risk your company accepts.
• Remediation capacity: how much fixing work your team can do.
• CIA weighting: how much each of three security properties counts for you.

CIA means confidentiality, integrity and availability. Confidentiality keeps information private to the right people. Integrity keeps information accurate and unchanged without permission. Availability keeps systems and information ready when you need them.

Goals

Select Add goal to create a goal. Enter a Target and a Current value. NextIT also suggests goals you can add.

Notifications

The Notifications section has three parts:

• The recipient matrix lists each event and the people who receive it.
• Report language and Report format set the language and format of your reports.
• Digest frequency sets how often the summary is sent: Daily, Weekly or Monthly.

Admins can also send a test notification. Each person sets their own preferences in My Profile.

Access & Roles

Use this section to add people and manage access.

• Select Invite user, enter the email, choose the role and the language, then select Send invitation. You can invite a User or an Admin.
• Under Join requests, select Approve or Reject.
• Under Manage auditor access, select Approve, Reject or Revoke.

For the full process, read Team and roles.

Documents & Policies

Select Open Privacy Policies to see your privacy policies. Select Download latest to save the newest version. A privacy policy downloads as a PDF. Its base language is French by default, and an English translation is produced automatically.

MCP & AI Agents

Choose which roles may connect an AI assistant to NextIT. Assistants connect through the Model Context Protocol (MCP). Each person signs in with their own account, so an assistant never gets more than that person’s role allows. Write actions ask for approval first. For the setup steps, read Connect your AI assistant.

Common tasks

• Update the company details: open Profile, change the fields and select Save changes.
• Record a personal information item: open PI Registry and enter what you collect, why and how long you keep it.
• Turn a framework on or off: open Compliance.
• Invite a colleague: open Access & Roles and select Invite user.

Tips

• Complete the PI Registry before you generate a privacy policy.
• Give an outside auditor access through Manage auditor access. The auditor reads every section and cannot change it.

Related

• Team and roles
• AI Privacy Policy & Terms Generator
• Compliance report
• Connect your AI assistant