Data Security Framework

1. Purpose

The InputiX Data Security Framework defines how we protect data across our systems, products, and operations. It outlines the principles, controls, and practices we use to safeguard information against unauthorized access, loss, misuse, or disclosure.

2. Scope

This framework applies to all data handled by InputiX, including but not limited to:

• Customer and client data
• Business and operational data
• Partner and vendor information
• Employee and contractor data

It applies across all environments where InputiX data is processed, stored, or transmitted.

3. Security Principles

Our data security practices are guided by the following core principles:

4. Access Control

• Role-based access controls are enforced across systems.
• Authentication mechanisms are used to verify user identity.
• Access rights are reviewed periodically and revoked when no longer required

5. Data Protection Measures

InputiX implements technical and organizational safeguards to protect data, which may include:

• Encryption of data in transit and at rest where appropriate
• Secure configuration of systems and services
• Monitoring and logging of system activity
• Regular backups and recovery procedures

6. Secure Development Practices

Security is integrated into our development lifecycle:

• Code is developed following secure coding best practices
• Changes are reviewed and tested before deployment
• Vulnerabilities are assessed and addressed in a timely manner

7. Third-Party and Vendor Security

We assess third-party service providers that may process or access InputiX data to ensure they maintain appropriate security controls. Access is limited to what is necessary for service delivery.

8. Incident Management

InputiX maintains procedures to identify, respond to, and mitigate security incidents:

• Security events are investigated promptly
• Appropriate containment and remediation actions are taken
• Lessons learned are incorporated to strengthen future defenses

9. Data Retention and Disposal

Data is retained only for as long as necessary to meet business, legal, or contractual requirements. Secure methods are used to delete or dispose of data when it is no longer needed.

10. Awareness and Responsibility

All individuals working with or on behalf of InputiX share responsibility for data security. Awareness of security risks and adherence to this framework are essential to maintaining trust.

11. Review and Updates

This Data Security Framework is reviewed periodically and updated as needed to reflect changes in technology, risk, regulatory requirements, or business operations.