DoubleGreen Security Policy

• Our Information Security Vision

  DoubleGreen fully recognizes that information security and personal data protection are the cornerstones of sustainable business development. We are committed to establishing a best-in-class security framework to ensure the confidentiality, integrity, and availability of customer data.

• Core Security Commitments

  • 1. ISO 27001 International Certification: Our company follows the ISO/IEC 27001 Information Security Management System (ISMS) and implements information security controls through systematic risk assessment processes.

  • 2. Secure Development (DevSecOps): We integrate security mechanisms into the Software Development Life Cycle (SDLC) to ensure that all code and products undergo rigorous security testing.

  • 3. Privacy Data Protection: For customers’ Personally Identifiable Information (PII), we enforce strict access controls and data anonymization technologies in compliance with personal data protection regulations.

• Information Security Governance and Operations

  We have established a dedicated Information Security Management Committee to conduct regular internal audits and disaster recovery drills. In addition, our 24/7 monitoring mechanisms ensure immediate response to any potential security threats.

• Continuous Improvement

  In response to increasingly sophisticated cybersecurity challenges, DoubleGreen is committed to continuously enhancing our security defenses and maintaining the highest level of trust in the eHR digital environment for our customers.