01
SOPs mandatory for all
Everyone knows and follows the incident procedures.
We protect your information through both systems and people. Four layers cover it: certification, governance, operation and controls.
// 01 OVERVIEW
Written for your IT and security reviewers. Each layer links to the detail behind it.
// 02 POLICY
Five goals guide how we protect the information you entrust to us.
Client data, employee data and all other confidential information.
Everyone on client projects applies the same level of protection.
Company-wide compliance is recorded so it can be tracked and audited.
Data protection law, ISO 27001, client contracts and NDAs.
Find and fix violations early, before they become incidents or leaks.
// 03 CONTROLS
We control access to information, and its removal, through both systems and facilities.
Each person gets only the access they need to systems and data.
Data is encrypted at rest and in transit to limit damage from any leak.
Regular backups for recovery from failures and incidents.
Banned by default; any off-site use needs approval and is logged.
Using production data beyond client instructions is prohibited.
Entry to the office is controlled to strengthen physical security.
// 04 PEOPLE
Everyone works by the same rules, from programmers and QA to management.
// 05 COMMITMENT
Transparency from pre-contract checks to reporting during operation. Feel free to ask about security, even before signing a contract.
We answer your IT department's questions and checklists, with evidence.
We adapt to project-specific NDAs and your own security requirements.
On request, we walk you through our review and incident-response records and procedures.
LET'S TALK
During the trial you can check our communication and quality before signing a full contract.