INFORMATION SECURITY POLICY
Due to our activity in the design, development, and maintenance of electronic invoicing process tools for suppliers and customers, and immediate information supply reporting, at easyap, we know that information is a highly valuable asset for both our organization and our customers. It therefore requires adequate protection and management to ensure business continuity and minimize potential damages caused by failures regarding the integrity, availability, and confidentiality of information.
Furthermore, both the current legislation related to personal data protection (GDPR and LOPDGDD) and ASLAM’s commitment to our customers make us especially sensitive to the processing of personal data to which we have access in the course of our activity.
For all of the above, easyap undertakes the following commitments:
- The permanent commitment of easyap regarding Privacy Management and Information Security will be demonstrated through training and awareness programs that promote participatory management in these areas, enabling staff skills to be utilized for the continuous improvement of the production process.
- To ensure the development of its activities within the applicable regulations and legislation (particularly GDPR and LOPDGDD), compliance will be given to the legislation, as well as other requirements agreed upon with its customers, including those relating to Privacy and Information Security.
- To comply with requirements and continuously improve the effectiveness of the Privacy and Information Security Management System through the implementation of measurement and monitoring systems for the solutions and developments provided to our customers, as well as Privacy and Information Security objectives.
- Ensure business continuity by developing continuity plans in accordance with recognized methodologies.
- Periodically conduct and review a risk analysis based on recognized methods to establish the level of information privacy and security and minimize risks through the development of specific policies, technical solutions, and contractual agreements with specialized organizations.
- The staff of easyap will carry out their work focused on achieving the set objectives and, at all times, in accordance with legal requirements.
As of October 1, 2023
Management
