Information Security Policy

Protecting information assets and the systems that process them is a strategic priority for My Buddy AI. This policy defines how we preserve trust, support business continuity, and safeguard customer and partner data across daily operations.

To support these goals, My Buddy AI applies this Information Security Policy to:

Maintain confidentiality, integrity, and availability of information throughout its lifecycle.
Keep critical information systems resilient, reliable, and fit for business use.
Detect and respond quickly to security events that could disrupt operations.
Meet legal, regulatory, and contractual information security obligations.
Drive continuous improvement in security controls, governance, and awareness.

The policy is implemented through the following areas:

A clear governance structure with defined ownership and accountability for information security.
Technical and organizational controls that restrict access based on business need.
Information classification rules that reflect sensitivity, business value, and risk.
Protection measures for data handling, storage, transfer, and secure disposal.
Regular awareness and role-based training for employees and relevant partners.
Documented incident management processes for reporting, escalation, and recovery.
Business continuity and disaster recovery arrangements for system failures and major disruptions.

My Buddy AI performs recurring information security risk assessments and applies proportionate controls to address identified risks. We monitor control effectiveness through measurable indicators, regular reporting, and leadership review to ensure ongoing improvement.

The Information Security Officer oversees policy implementation and control monitoring, and coordinates actions to reduce risks to confidentiality, integrity, and availability. All employees and authorized partners are responsible for complying with this policy and related procedures.

My Buddy AI is committed to maintaining compliance with applicable legal and regulatory requirements and to continuously strengthening the effectiveness of its Information Security Management System.

Information Security Policy

To support these goals, My Buddy AI applies this Information Security Policy to:

Maintain confidentiality, integrity, and availability of information throughout its lifecycle.
Keep critical information systems resilient, reliable, and fit for business use.
Detect and respond quickly to security events that could disrupt operations.
Meet legal, regulatory, and contractual information security obligations.
Drive continuous improvement in security controls, governance, and awareness.

The policy is implemented through the following areas:

A clear governance structure with defined ownership and accountability for information security.
Technical and organizational controls that restrict access based on business need.
Information classification rules that reflect sensitivity, business value, and risk.
Protection measures for data handling, storage, transfer, and secure disposal.
Regular awareness and role-based training for employees and relevant partners.
Documented incident management processes for reporting, escalation, and recovery.
Business continuity and disaster recovery arrangements for system failures and major disruptions.

My Buddy AI is committed to maintaining compliance with applicable legal and regulatory requirements and to continuously strengthening the effectiveness of its Information Security Management System.