At Globenova AI, we take the security of our clients' data very seriously, particularly given thesensitive nature of our work in defence  and intelligence. Our Security Policy outlines ourapproach to safeguarding data, ensuring compliance with industry standards, and providing ourclients with peace of mind.

‍

1. Data Protection

We utilize state-of-the-art encryption technologies to protect data both at rest and in transit. Allsensitive data is encrypted using AES-256 encryption, and access to it is restricted to authorizedpersonnel only.

‍

2. Access Control

Our systems employ strict role-based access control (RBAC), ensuring that only authorizedindividuals have access to sensitive information. We require multi-factor authentication (MFA) forall users accessing critical systems to minimize unauthorized access.

‍

3. Incident Response

We have an established incident response plan (IRP) that includes immediate detection, response,and remediation of any security incidents. This plan is regularly tested to ensure that we canrespond quickly and effectively to any potential threats.

‍

4. Compliance

Globenova AI complies with all applicable data protection and cybersecurity regulations, includingCanada s PIPEDA (Personal Information Protection and Electronic Documents Act), and relevantdefence  and intelligence sector regulations.

‍

5. Third-Party Security

We conduct thorough security assessments of all third-party vendors and service providers toensure they meet our high standards for data protection and cybersecurity.

‍

6. Ongoing Monitoring and Training

Our security measures include continuous monitoring of systems to detect vulnerabilities andthreats. We also regularly conduct security training and awareness programs for our team toensure adherence to the latest security protocols

‍

7. Data Retention and Disposal

We retain personal and sensitive data only for as long as necessary to fulfill the purpose for whichit was collected. Once no longer needed, we securely dispose of data in accordance with bestpractices to ensure it cannot be recovered.

‍

8. Updates to the Security Policy

We review and update our Security Policy regularly to adapt to emerging security threats andchanges in regulatory requirements. Clients will be notified of significant changes.

‍

9. Contact Information

For any questions regarding our security practices or to report a security concern, please contact us at [compliance@globenova.ai].