Security
We ensure that your data, including your inputs and outputs,
are:
NOT used to train or improve AI models
NOT available to other customers
NOT stored outside the EU or EEA
NOT used to improve third-party products or services
Your data, your control
At all times
Capacity management
The use of resources shall be monitored and adjusted in line with current and expected capacity requirements.
Password policy enforced
The company requires passwords for in-scope system components to be configured according to the company's policy.
Network segmentation
The company's networks are segmented to limit access between systems and reduce the impact of potential security incidents.
Encryption in transit
All data transmitted over public networks is encrypted using industry-standard protocols (TLS 1.2 or higher).
Encryption at rest
Sensitive data is encrypted at rest using AES-256 or equivalent encryption standards.
Continuity and Disaster Recovery plans established
The company has Business Continuity and Disaster Recovery Plans in place that outline communication plans in order to maintain information security continuity in the event of the unavailability of key personnel.
Continuity and Disaster Recovery plans tested annually
The company has a documented business continuity/disaster recovery (BC/DR) plan and tests it annually.
ICT readiness for business continuity
ICT readiness shall be planned, implemented, maintained and tested based on business continuity objectives and ICT continuity requirements.
Information backup
Backup copies of information, software and systems shall be maintained and regularly tested in accordance with the agreed topic-specific policy on backup.
Security awareness training
Employees receive regular security awareness training to recognize and respond to potential security threats.
Access control policy
Access to information and systems is granted based on the principle of least privilege and reviewed regularly.
Risk management framework
The company maintains a documented risk management framework to identify, assess, and mitigate information security risks.
Legal Documents
Terms of Service
Data & Privacy
