Integrity and confidentiality
Art. 5(1)(f)
-
Last updated
Mandatory
Catalog reference
Process personal data with appropriate security against unauthorised or unlawful processing, accidental loss, destruction, or damage. This principle is made concrete by the security-of-processing duty in Art. 32.
Narrative — how we satisfy this requirement
Customer data is protected by the ISMS controls: encrypted backups, role-based access, endpoint detection, and logging on the hosting platform.