Information security policy

We design for security from the outset. We apply role-based access control, encryption, monitoring and vulnerability management.

We operate a documented incident response process, and we design our documentation to support regulatory notifications within the required deadlines.

We maintain business continuity and disaster recovery plans and test them with the involvement of the responsible teams.

For clients within the scope of NIS2 and DORA, we adapt our controls and documentation to the requirements of those regimes.