Information Security Policy

This Information Security Policy has been established to protect the confidentiality, integrity, and availability of information assets in the products, services, and digital platforms (website, mobile app, and other online services) offered under the Inspera brand.

1. Purpose of the Policy

The purpose of this policy is to ensure that all information assets belonging to Inspera are protected against unauthorized access, data loss, alteration, disclosure, and misuse, and to establish the fundamental principles governing information security processes.

2. Scope

This policy applies to

• All digital systems used within Inspera,
• websites, software, and infrastructure,
• employees, business partners, and authorized service providers

.

3. Information Security Principles

Inspera adheres to the following fundamental principles in its information security processes:

• Confidentiality: Only authorized individuals may access information.
• Integrity: The accuracy and timeliness of information are maintained.
• Availability: Authorized users can access information when needed.

4. Technical and Administrative Security Measures

Inspera implements appropriate technical and administrative measures to ensure information security. In this context:

• Secure server and software infrastructures are used,
• Authorization and access control mechanisms are implemented,
• Firewalls and monitoring systems are used,
• Regular backups and system updates are performed,
• Preventive and corrective measures are taken against information security breaches.

5. Access and Authorization

Access to information systems is restricted based on role and authority. User accounts are regularly reviewed to prevent unauthorized access, and access privileges are updated or revoked as necessary.

6. Third Parties and Service Providers

Inspera expects third parties from whom it receives services to also comply with information security standards. In collaborations with these parties, the necessary technical and administrative measures related to information security are taken.

7. Security Breaches

Any potential information security breaches are immediately assessed by Inspera, and the necessary measures are taken. Processes are reviewed and improved to prevent the recurrence of such breaches.

8. Policy Updates

Inspera may update this Information Security Policy in line with technological advancements and operational requirements. The updated policy becomes effective as of the date it is published on digital platforms.

Anyone using Inspera’s digital platforms is deemed to have agreed to comply with the principles set forth in this Information Security Policy.