Security and Data Handling Policy

1. Security Measures

CLOUDPAGE implements reasonable technical and organizational controls, including, among others:

• ▸Encryption of data in transit and, where applicable, at rest.
• ▸Role-based access control with least privilege.
• ▸Secure authentication and credential management.
• ▸Security monitoring, logging and alerts of the infrastructure.
• ▸Periodic updating and patching of systems.
• ▸Backups and recovery procedures.

2. Client Data Handling

We access Client data and systems only to the extent necessary to provide the Services and in accordance with Client instructions.

We do not use Client data for purposes other than the Services and do not disclose it to third parties unless necessary for service delivery or required by law.

Client confidential information is protected with the same measures we apply to our own information.

3. Client Responsibilities

The Client is responsible for managing its accounts and credentials, keeping its systems updated, and complying with its own security and regulatory obligations.

The Client must notify CLOUDPAGE of any incident, credential compromise or suspicious activity that may affect the Services.

The effectiveness of certain security measures depends on proper use by the Client (for example, not sharing credentials, maintaining password policies).

4. Incident Response

In the event of a security incident affecting data or systems under our control, CLOUDPAGE will act diligently to contain, investigate and remediate the incident.

We will notify the Client promptly when the incident may affect its data or services, and will cooperate in management and regulatory notifications where applicable.

5. Backups and Recovery

We maintain backup and recovery procedures for the systems we operate directly.

Client data stored on the Client's own systems or on third-party services is governed by the Client's or the applicable third party's policies.

Specific backup responsibilities will be defined in the applicable proposal or work order.

6. Compliance

This Policy does not constitute a guarantee of absolute security. Services are provided in accordance with the Terms of Service and the liability limitations set out therein.

The provision of security services (for example, managed cybersecurity) reduces, but does not eliminate, risks. The Client must implement complementary controls appropriate to its operation.

7. Contact

For any questions about these documents, write to info@cloudpage.us or call us at +1 (786) 234-6666. [Registered Address of CLOUDPAGE LLC]