Scope
This policy applies to all B2B Leo personnel, contractors and systems handling client, contact or business information.
Governance
Information security is owned by the CTO and a dedicated security lead. Policies are reviewed and approved annually by leadership.
Risk management
We maintain a formal risk register, with quarterly reviews. Identified risks are tracked to remediation with named owners.
Employee training
All personnel complete security awareness training at onboarding and annually thereafter. Role-specific training is provided for engineering, support and sales.
Vendor management
Sub-processors and vendors are vetted before engagement and reviewed annually. Data processing agreements are in place with every vendor handling personal data.
Business continuity
Backup and recovery procedures are tested quarterly. RPO and RTO targets are defined for every critical system.
Contact
For a copy of our full ISP under NDA, email info@b2bleo.com.