Neto: Sustained Operational Discipline at Scale

General Information Security Policy

Information Security at Frogmi is a fundamental part of the business, building trust with our clients and users in the information technologies we operate. Data, based on our information classification, is managed to the highest standards according to the best practices available on the market, which supports our growth and organizational sustainability.

Information Security at Frogmi is made possible by the commitment of Senior Management, promoting a culture of continuous improvement. It also enables the sponsorship of the resources and tools needed to provide a suitable working environment for employees.

Senior Management understands and addresses the importance and benefits of staying compliant not only with ISO 27001 requirements and security best practices, but also with other legal, contractual and governmental requirements relevant to the organization's context.

At Frogmi, our Information Security policies and procedures are known to all employees in the organization. Where possible, and based on the defined ISMS Communication Plan, our key stakeholders will be informed of our guidelines and best practices.

• Protect our clients' sensitive information stored by our solution, preventing leaks or misuse.
• Ensure our clients can access and manage their information according to the declared service levels.
• Prevent loss or inconsistencies in our clients' information due to infrastructure provider failures or internal failures in any component of our solution.
• Identify, manage and minimize risks through tools such as access reviews based on an access matrix, password vaults, security incident management, etc.
• Continue strengthening our ISMS through continuous improvement in our processes, maintaining the implementation of information security guidelines, and an organizational culture aware of information availability, confidentiality and integrity.