Public Summary of the Information Security Policy
iGEO’s commitments to protecting information and maintaining trust in its services
Our commitment
Intime Desarrollos Informáticos, S.L. (iGEO) considers information security an essential requirement for delivering reliable services, protecting the data entrusted to it by customers and users, and ensuring business continuity. To this end, iGEO maintains a risk-based Information Security Management System (ISMS), aligned with the applicable legal, regulatory and contractual requirements.
Scope
This policy applies to the information, assets, processes, people and third-party relationships included within the ISMS. It covers software development and maintenance, provisioning, cloud operations and administration, and technical support for Software-as-a-Service (SaaS) solutions intended for the pest control sector, regardless of the location from which these activities are carried out.
Its principles are mandatory for all individuals working under iGEO’s control and, where applicable, for suppliers and third parties that access information or resources falling within this scope.
Principles guiding our actions
- Confidentiality. Information will only be available to authorised individuals who require access to perform their duties.
- Integrity. Data, systems and records will be protected against unauthorised modification, loss or destruction.
- Availability and resilience. Services will be supported by appropriate continuity, recovery and restoration measures.
- Risk-based management. Security priorities will be determined by considering assets, threats, potential consequences and applicable requirements.
- Security and privacy by design. Protection measures will be incorporated from the outset into developments, services and changes.
- Least privilege. Access will be limited to what is strictly necessary and reviewed whenever roles or requirements change.
- Accountability and traceability. Relevant decisions, actions and exceptions must be justified and appropriately recorded.
Security commitments
iGEO is committed to:
- Identifying and protecting information throughout its entire lifecycle according to its sensitivity, criticality and applicable requirements.
- Managing identities and access through authorisation, individual identification, least-privilege principles and periodic reviews.
- Integrating security requirements into software development and ensuring that significant changes are assessed, authorised, tested and recorded.
- Managing cloud services and suppliers in accordance with risk, contractual requirements and the shared responsibility model.
- Maintaining appropriate measures for secure configuration, monitoring, vulnerability management, backups, restoration and business continuity.
- Identifying, assessing, containing, resolving and documenting security incidents, preserving relevant evidence and issuing any required notifications.
- Training and raising awareness among personnel to ensure information is protected in both on-site and remote working environments, and that security events or weaknesses are reported without delay.
- Authorising and controlling the use of artificial intelligence while protecting confidentiality, privacy, intellectual property and ensuring human review of relevant results.
- Evaluating the performance of the ISMS, correcting deviations and continuously improving its policies, processes and controls.
Governance and responsibilities
Senior Management approves this policy, establishes objectives aligned with it and provides the resources required to operate and continuously improve the ISMS. All individuals within its scope are responsible for complying with the applicable rules, protecting the information they access and reporting any security event or weakness through authorised channels.
Compliance, review and availability
The policy is reviewed at least once a year and whenever significant changes occur in the organisational context, scope, risks, applicable requirements, services or technology. Any non-compliance and exceptions are managed in a documented and proportionate manner and in accordance with the applicable legal and contractual framework.
Communication. Interested parties may submit security-related enquiries through the corporate communication channels published by iGEO. Communications concerning personal data will also be handled in accordance with the applicable privacy information.
