Effective Date: 01 November 2026
Shrum Tech is committed to protecting the confidentiality, integrity, and availability of information entrusted to us by our clients, employees, partners, and business stakeholders.
Information Protection: We aim to protect business and client information against unauthorized access, disclosure, alteration, loss, and destruction through appropriate administrative, technical, and organizational safeguards.
Access Control: Access to systems, applications, and information should be granted according to business requirements and authorized responsibilities. Access credentials must be protected, and access should be reviewed and revoked when no longer required.
Data Handling: Confidential and client information must be collected, accessed, stored, transmitted, and disposed of responsibly. Employees and authorized personnel are expected to follow approved procedures and applicable confidentiality obligations.
Secure Development and Integrations: Salesforce implementations, custom development, APIs, cloud platforms, and third-party integrations should follow appropriate security practices, including secure configuration, access restrictions, testing, and protection of sensitive information.
Incident Management: Suspected security incidents, data breaches, or unauthorized access must be reported promptly through designated company channels. Appropriate steps should be taken to investigate, contain, remediate, and communicate incidents where required.
Third-Party Security: External service providers and technology platforms should be selected and used with due consideration for their security responsibilities and applicable contractual requirements.
Employee Responsibility and Improvement: Personnel are expected to follow company security procedures, maintain confidentiality, and participate in relevant security awareness activities. This policy may be reviewed periodically and updated as business needs and applicable requirements evolve.
Contact: Security-related concerns may be reported to info@shrumtech.com.
This policy establishes Shrum Tech’s security commitments and should be implemented through appropriate internal procedures, controls, and reviews.
