Information Security Policy

Vaival Technologies, engaged in software development and IT services, is dedicated to safeguarding its information assets by implementing information security controls to minimize the impact of security incidents. To establish, maintain, and continually improve the Information Security Management System (ISMS) and provide a framework for defining objectives and targets, Vaival commits to the following:

i. The ISMS will be established in accordance with the ISO 27001 baseline, ensuring strict adherence to its principles.
ii. Compliance with all applicable legal and contractual requirements will be diligently ensured.
iii. Vaival will maintain the highest standards for information protection, ensuring the Confidentiality, Integrity, and Availability (CIA) of information assets through the systematic deployment of security controls.
iv. Robust business continuity plans will be developed, maintained, and regularly tested.
v. Risks to all corporate assets, including tangible/intangible and human resources, will be assessed, and appropriate controls, mitigation, and contingency plans will be implemented.
vi. A secure and safe environment will be provided for the preservation of all corporate assets, including tangible/intangible assets and personnel.
vii. A conducive work environment, free from accidental and occupational hazards, will be maintained for the human resource.
viii. All personnel will undergo training in information security practices, roles, and responsibilities.
ix. Appropriate data protection controls will be applied throughout Vaival.

Personal information will be safeguarded in compliance with industry standards, applicable laws, and Vaival’s security protocols.

This Policy is reviewed annually or (when required) to ensure the suitability, adequacy, and effectiveness of ISMS and communicated to all the interested parties.