SMU and Frogmi against food waste – Technology at the service of retail and the planet

General Information Security Policy

Information Security at Frogmi is a fundamental part of the business, building trust with our customers and users in the information technologies we operate. Data, based on our information classification, is managed to the highest standards according to the best practices available on the market, which supports our growth and organizational sustainability.

Information Security at Frogmi is made possible by the commitment of Senior Management, promoting a culture of continuous improvement. It also enables the sponsorship of the resources and tools needed to provide a suitable working environment for employees.

Senior Management understands and addresses the importance and benefits of staying compliant not only with ISO 27001 requirements and security best practices, but also with other legal, contractual, and governmental requirements relevant to the organization's context.

At Frogmi, our Information Security policies and procedures are known to all employees in the organization. Where possible, and based on the defined ISMS Communication Plan, our key stakeholders will be informed of our guidelines and best practices.

• Protect our customers' sensitive information stored by our solution, preventing leaks or misuse.
• Ensure our customers can access and manage their information according to the declared service levels.
• Prevent loss or inconsistencies in our customers' information due to infrastructure provider failures or internal failures in any component of our solution.
• Identify, manage, and minimize risks through tools such as access reviews based on an access matrix, password vaults, security incident management, etc.
• Continue strengthening our ISMS through continuous improvement in our processes, maintaining the implementation of information security guidelines, and an organizational culture aware of information availability, confidentiality, and integrity.