Request a demo
Back to home

Information Security Policy

Electric Save App Digital, SL, a company dedicated to the processes of extracting, processing, and analyzing all data from the invoices of customers of the marketers using our platform, has implemented an Information Security Management System based on the requirements of the ISO 27001:2022 standard. The objective is to ensure that all information technology assets and resources are used and managed in a way that protects their confidentiality, integrity, and availability, and to ensure business continuity, minimize damage, maximize the return on investments and business opportunities, and promote continuous improvement.

ESAVE’s management, through the development and implementation of this Information Security Management System, commits to the following:

  • Develop solutions and services compliant with the law requirements, by identifying the laws applicable to the business lines developed by the organization and included in the scope of the ISMS.
  • Establish and comply with the contractual requirements with stakeholders.
  • Provide training and awareness-raising programs about information security for all employees and other stakeholders.
  • Prevent and detect any virus or malicious software, by developing specific policies and establishing contractual agreements with specialized organizations.
  • Conduct information security risk assessments in order to identify and implement controls to reduce the impact of identified risks.
  • Develop and maintain business continuity and disaster recovery plans.
  • Establishment of the consequences of security policy violations, which will be reflected in the contracts signed with the interested parties, suppliers and subcontractors.
  • Promote a culture of continuous improvement in the management of information security and implement improvements based on incident analysis, audits and regular inspections.
  • Act at all times within the strictest professional ethics.
  • Ensure that information systems are used and accessed safely and in compliance with the established policies.
  • Maintain the reputation of the brand with regards to data security.
  • Properly manage the information lifecycle to prevent improper use at any stage.
  • The organization’s staff will participate in managing incidents related to services and information security with the aim of restoring normal service operation levels as quickly as possible and minimizing the adverse impacts of such incidents on the organization.
  • Ensure the protection of intellectual property rights.
  • Establish a set of objectives and indicators on a regular basis, which allow the management to perform a correct monitoring of the offered service levels and the management activities.
  • Senior management commits itself to provide the necessary resources to maintain and improve the Information Security Management System (ISMS).

This policy is a fundamental part of the Entity’s Integrated Planning and Management System (SIPG) and is continuously communicated to all stakeholders in its current version.