Resources
Policies, security documentation, and audit-ready evidence. Private items unlock through the access-request flow.
Documents
- Publicly available privacy policy 1DocumentPrivate
- Application audit logs 1DocumentPrivate
- Sensitive data flow diagram 1DocumentPrivate
- System Configuration - Database Sample 1DocumentPrivate
- Data inventory & map 1DocumentPrivate
- Network diagram (with segmentation zones) 1DocumentPrivate
- Network security configuration standard 1DocumentPrivate
- External vulnerability scan report 1DocumentPrivate
- Release testing evidence 1DocumentPrivate
- Backup restore test results 1DocumentPrivate
- Disaster recovery exercise records 1DocumentPrivate
- Incident response plan test (annual) 1DocumentPrivate
- Internal audit report 1DocumentPrivate
- Vendor security review 1DocumentPrivate
- SOC 2 System Description (Section III) 1DocumentPrivate
- Board of directors charter 2DocumentPrivate
- Physical access records (list & approvals) 1DocumentPrivate
- Visitor records (log, badges & escort) 1DocumentPrivate
- Data Protection Impact Assessment (DPIA) 1DocumentPrivate
- EU representative appointed 1DocumentPrivate
- Lead supervisory authority appointed 1DocumentPrivate
- SAR Acknowledgement 1DocumentPrivate
- Data Subject Access Requests 1DocumentPrivate
- MSA template 1DocumentPrivate
- Data Processing Agreements (DPA) with customers 1DocumentPrivate
- Opt-in communication method 1DocumentPrivate
- Opt-out request response 1DocumentPrivate
- Point of collection notice 1DocumentPrivate
- Data subject request (DSAR) intake channel 1DocumentPrivate
- SAR Response 1DocumentPrivate
- Job description for key security roles 1DocumentPrivate
- User access review working paper (ARC-001) 1DocumentPrivate
- Nonconformity & corrective action log 1DocumentPrivate
- Job description for key security roles 2DocumentPrivate
- User access review working paper (ARC-001) 2DocumentPrivate
- Nonconformity & corrective action log 2DocumentPrivate
- Nonconformity & corrective action log 3DocumentPrivate
- Targeted risk assessment (new system/project) 1DocumentPrivate
- Customer data deletion record 1DocumentPrivate
- Contractor agreement 1DocumentPrivate
- Completed performance evaluations 1DocumentPrivate
- Completed employee background checks 1DocumentPrivate
- Board of directors charter 1DocumentPrivate
- Access request ticket and history 1DocumentPrivate
- Access request ticket and history 2DocumentPrivate
- Board of directors CVs 1DocumentPrivate
- Board of directors CVs 2DocumentPrivate
- Public changelog / release notes 1DocumentPrivate
- Public changelog / release notes 2DocumentPrivate
- Board charter (or management oversight) 2DocumentPrivate
- Board of directors charter 1DocumentPrivate
- Board of directors meeting minutes and agenda 1DocumentPrivate
- Board of directors meeting minutes 1DocumentPrivate
- Security Meetings 1DocumentPrivate
- Security leadership qualifications 1DocumentPrivate
- Security leadership qualifications 2DocumentPrivate
- Media & device disposal records 1DocumentPrivate
Policies
- AI Ethics and Trustworthiness PolicyPolicyPrivate
- AI PolicyPolicyPrivate
- AIMS Governance PolicyPolicyPrivate
- AIMS Impact Assessment ProcessPolicyPrivate
- Access Control PolicyPolicyPrivate
- Asset Management PolicyPolicyPrivate
- Backup & Recovery ProcedurePolicyPrivate
- Business Continuity Testing ProcedurePolicyPrivate
- Business Continuity and Disaster Recovery PlanPolicyPrivate
- Change Management ProcedurePolicyPrivate
- Code of ConductPolicyPrivate
- Cryptography PolicyPolicyPrivate
- Data Management PolicyPolicyPrivate
- Data Retention & Deletion ProcedurePolicyPrivate
- Employee Onboarding ProcedurePolicyPrivate
- GDPR Compliance PolicyPolicyPrivate
- GDPR Incident Response PlanPolicyPrivate
- HIPAA Compliance PolicyPolicyPrivate
- Human Resource Security PolicyPolicyPrivate
- ISMS Information Security Communication PlanPolicyPrivate
- ISMS Information Security Management System (ISMS) PolicyPolicyPrivate
- ISMS Master List of DocumentsPolicyPrivate
- ISMS Procedure for Corrective Action and Continual ImprovementPolicyPrivate
- ISMS Procedure for Internal AuditsPolicyPrivate
- ISMS Procedure for Management ReviewPolicyPrivate
- ISMS Risk Assessment and Risk Treatment ProcessPolicyPrivate
- Identity & Access Management ProcedurePolicyPrivate
- Incident Response PlanPolicyPrivate
- Incident Response ProcedurePolicyPrivate
- Information Security Policy (AUP)PolicyPrivate
- Key Management ProcedurePolicyPrivate
- Log Review & Monitoring ProcedurePolicyPrivate
- Operations Security PolicyPolicyPrivate
- PCI DSS 4.0 PolicyPolicyPrivate
- Physical Security PolicyPolicyPrivate
- Privacy Compliance PolicyPolicyPrivate
- Risk Assessment ProcedurePolicyPrivate
- Risk Management PolicyPolicyPrivate
- Secure Development PolicyPolicyPrivate
- Security Project Management PolicyPolicyPrivate
- Third-Party Management PolicyPolicyPrivate
- Third-Party Risk Assessment ProcedurePolicyPrivate
- Vulnerability Management ProcedurePolicyPrivate