Information Security and Data Management Policy.

Our Commitment to Information Security

As a company, we are committed to ensuring the confidentiality, integrity, and availability of our information assets and data through a robust security framework aligned with the ISO/IEC 27001 standard. To maintain this high level of security, we adhere to the following principles:

We undertake the rigorous protection of all sensitive information against unauthorized access, accidental disclosure, or any form of malicious alteration and destruction.
We ensure our operations are conducted in strict accordance with all applicable international laws, regional regulations, and specific contractual obligations to maintain a compliant and transparent security posture.
We implement a comprehensive data classification system where all information is categorized by sensitivity, ensuring that the most stringent access controls are applied to our most critical data assets.
We protect every piece of sensitive data using industry-standard encryption protocols both while at rest in our systems and during active transmission across networks.
We strictly govern access to our internal systems by the principle of least privilege, complemented by robust multi-factor authentication to verify the identity of every user.
We enforce clear data retention and disposal policies that include secure deletion methods to ensure that information is irrecoverably destroyed once it has fulfilled its purpose.
We maintain a specialized incident response team to rapidly identify, evaluate, and mitigate any potential security threats, ensuring business continuity.
We foster a culture of security through continuous monitoring, regular internal audits, and mandatory specialized training sessions to keep our entire team aligned with global best practices.