Information Security Statement
​
Upai develops and maintains software designed to help organizations manage vendor accessibility compliance. In doing so, we recognize that information and information systems are essential to the trust placed in us by our users. Protecting the security and privacy of this information is fundamental to Upai’s mission and is treated as confidential at all times.
​
The executive management of Upai acknowledges the critical importance of information and system reliability in delivering our services. We are committed to implementing and promoting practices that safeguard the normal and secure operation of our platform. To this end, Upai has established an
Information Security Policy that aims to:
​
-
Ensure the confidentiality, integrity, and availability of the information we process.
-
Protect the rights of individuals whose data is entrusted to us.
-
Comply with applicable legal and regulatory requirements.
-
Respond promptly to incidents that may impact information security.
To achieve these objectives, Upai maintains both technical and organizational measures, including:
-
Defined structures and responsibilities for monitoring information security.
-
Access controls and safeguards to restrict and monitor system use.
-
Classification of information based on its criticality and value.
-
Protections applied during collection, storage, and transfer of information.
-
Training and awareness programs for employees and partners.
-
Incident response protocols to address potential security threats.
-
Business continuity measures to ensure resilience in the event of system failures or disruptions.
Upai conducts regular information security risk assessments and applies appropriate risk treatment measures. The effectiveness of our security program is reviewed at planned intervals, with outcomes reported to management to ensure continuous improvement and alignment with evolving risks.
Responsibility for overseeing information security policies and procedures rests with Upai’s designated Information Security Officer, who ensures controls remain effective and risks are appropriately managed.
​
All employees and partners with access to information systems are responsible for following the principles outlined in our Information Security Policy.
​
Upai’s management and staff are committed to the ongoing improvement of our system, ensuring it remains suitable, effective, and aligned with our mission to deliver secure, trusted services.