Overview
Talpro Software is committed to maintaining the security, integrity, and confidentiality of information assets entrusted to us by our clients. This Information Security Policy outlines our commitment to information security and provides guidelines for the protection of sensitive data within our HR SaaS platform, located at portal.xceed365.com.
1. Information Security Responsibilities
All employees, contractors, and third-party vendors accessing our systems are responsible for complying with this Information Security Policy and safeguarding the information assets they handle. We will provide appropriate training and awareness programs to ensure compliance with security procedures and standards.
2. Data Classification and Handling
We classify information assets based on their sensitivity, value, and regulatory requirements. Data shall be labeled and handled according to its classification level. Employees must exercise due care when handling sensitive data, including personal, financial, or confidential information, and adhere to the principles of least privilege and need-to-know.
3. Access Controls
Access to our HR SaaS platform and its associated data shall be granted on a need-to-know basis. User accounts will be assigned based on job roles and responsibilities. User access privileges shall be regularly reviewed and revoked promptly when no longer required. Strong authentication mechanisms, such as complex passwords and two-factor authentication, shall be implemented to protect user accounts.
4. Data Protection and Encryption
Sensitive data transmitted over public networks shall be encrypted using secure protocols. Data at rest and in transit within our systems shall be protected using industry-standard encryption techniques. Encryption keys and certificates shall be securely stored and managed.
5. Incident Response and Reporting
We maintain an incident response plan to effectively respond to and mitigate security incidents. Employees must promptly report any actual or suspected security incidents, including data breaches, to the designated incident response team. We will investigate reported incidents and take appropriate actions to minimize potential harm and prevent future occurrences.
6. System Monitoring and Logging
We employ monitoring and logging mechanisms to detect and respond to security events. Logs and security-related events shall be collected, reviewed, and retained in accordance with applicable legal and regulatory requirements. Log analysis and audit trails shall be regularly reviewed to identify potential security issues.
7. Physical Security
Physical access to our facilities, servers, and data storage locations shall be controlled and restricted to authorized personnel only. We will implement appropriate physical security measures to protect against unauthorized access, theft, and damage.
8. Business Continuity and Disaster Recovery
We maintain a business continuity and disaster recovery plan to ensure the availability and resilience of our systems and services. The plan includes regular backups, periodic testing, and alternative processing facilities to minimize the impact of disruptions.
9. Vendor Management
Third-party vendors and service providers that have access to our systems or data shall adhere to security standards and obligations outlined in contractual agreements. We will conduct due diligence when engaging with vendors and regularly assess their compliance with security requirements.
10. Compliance with Laws and Regulations
We are committed to complying with applicable laws, regulations, and industry standards related to information security and data protection. We will regularly review and update our security practices to ensure ongoing compliance with evolving legal and regulatory requirements.
11. Employee Termination
Upon termination of employment or engagement, access rights of employees, contractors, and vendors shall be promptly revoked. Necessary measures shall be taken to protect against unauthorized access or use of information assets.
12. Policy Review and Updates
This Information Security Policy will be reviewed periodically to ensure its relevance and effectiveness. Updates and revisions will be communicated to employees and made available on our website.
We appreciate your cooperation in helping us maintain the security and confidentiality of our HR SaaS platform. Questions about this policy can be sent to hello@talprosoftware.com.
Effective Date: 1st July, 2025 · Last Updated: 1st July, 2025