Information Security Policy

This policy covers corporate information handled in design, integration, software, operation, and support. It binds Exiplus staff and appointed partners.

Access is granted to the extent the role requires, and only within a defined authorisation. Systems and records are protected against unauthorised access, loss, and unauthorised change. Continuity, backup, and response are part of the same regime.

Access rights are issued by role and reviewed when the role changes. Credentials are personal and are not shared. Security events are reported to the responsible management without delay.

Parties engaged for a service are expected to apply equivalent care to information placed in their trust. Events are recorded, their effect is contained, and recurrence is addressed.