Information Security Policy

Our principles in providing the service are:

• Protection of the information and data processed on the platform.
• Application of technical and organisational measures appropriate to the identified risks.
• Compliance with the law and with the commitments made to clients and stakeholders.
• Access management and protection of portal accounts.
• Prevention, detection and management of security incidents.
• Continuity of services and recovery from incidents.
• Continuous improvement of security measures and processes.

Logic Nearshore adopts measures aimed at preserving the confidentiality of the information managed, preventing unauthorised alterations and maintaining the availability of the services necessary to provide the service.

Information security is managed taking into account the assets, processes, technology providers and risks associated with the platform and the provision of the service. Measures are reviewed according to the risks identified and the needs of the business.

Logic Nearshore carries out its activity under the applicable legislation and pays particular attention to personal data protection requirements, including Regulation (EU) 2016/679 (GDPR) and the applicable Spanish regulations.

The technology services used for the platform are managed according to their functions and associated risks.

Providers delivering services for the platform (electronic signature, payment processing, hosting and storage, email delivery and protection against automated traffic) are selected according to the security and data protection guarantees they offer.

Where a provider processes personal data on behalf of Logic Nearshore, the relationship is formalised through a data processing agreement in accordance with article 28 GDPR. The list of providers, their function and their location is detailed in the Privacy Policy.

Procedures are maintained to identify, manage and resolve incidents that may affect the security or availability of information and services. Continuity and recovery measures will be applied according to the nature and criticality of each service.

The organisation promotes staff training and awareness regarding their responsibilities in information security and data protection.

The Information Security Policy will be reviewed periodically to adapt it to changes in services, risks, legal requirements and client needs.

The Management of Logic Solutions Consulting, S.L. undertakes to provide the resources necessary to comply with this policy and to keep it available to the relevant stakeholders.