Our Information Security Policy

1. General Principles

IDIPP® is certified under the ISO/IEC 27001:2022 information security and ISO/IEC 27701:2019 privacy information management standards, and is SOC 2 Type II compliant. We properly classify our information assets, implement security controls, and continuously review our systems.

2. Data Encryption and Secure Storage

All your product passport data and personal data are protected with industry-standard encryption methods. Sensitive data is always stored and transmitted encrypted. Only authorized personnel can access your data to the extent necessary.

3. Security Breach Notifications

In the event of any security breach, we inform affected users and, when necessary, the relevant authorities in accordance with applicable regulations. Our systems are continuously monitored to detect potential security breaches.

4. Staff Security

Our employees undergo regular information security training. They are subjected to security checks during the hiring process and sign confidentiality agreements. Access rights are regularly reviewed and unnecessary authorizations are revoked.

5. Technical Measures

6. Business Continuity

We have comprehensive business continuity and disaster recovery plans to ensure the security of your data and the continuity of our services in the event of possible disasters. Your data is regularly backed up and stored in secure environments.

7. Supplier Relations

Our third-party service providers must maintain the same high security standards. We sign data processing agreements with all our suppliers and conduct regular audits.

8. Contact

If you have any questions or concerns about our information security policy, please send an email to info@idipp.com .