Security

Security Policies

What Paramétrica practices in information security, published for anyone to check — customer, auditor or visitor.

These policies are versioned and describe what our systems actually do. They do not promise controls that do not exist: where there is a limit, the limit is written down.

Information Security Policy
The umbrella: secure channel, authentication, sessions, passwords and workstations.
 Access Management Policy
Who accesses what, how access is born and revoked, and the twice-yearly review.
 Continuity and Recovery Plan
Backups, environment rebuild, and honest recovery targets.
 Incident Response Plan
Detection, containment, communication and record-keeping.
 Code of Conduct and Ethics
What is practiced and expected, at the real size of the team.
 Remote Work Policy
The same system requirements, plus conduct at the endpoint.

Related documents

How we handle personal data — what we collect, why, for how long, and how to exercise your rights — has its own document: the Privacy Policy.

Each policy published here has an internal technical annex, versioned alongside the systems' source code, mapping every commitment to the mechanism that fulfils it. For vendor due diligence, that annex is provided under the appropriate context — write to administrativo@parametrica.com.br.