Data Security and Confidentiality

We follow strict protocols to implement physical as well as IT related aspects of data security.

Physical Security

• Our premises are covered with closed circuit cameras to monitor and secure our work place.
• We have implemented an access control system at the entrance of our workplace to allow only controlled entry into the production areas.
• The access to the server room is restricted and no one except the IT team is allowed to enter. This access too is authenticated by access card only.
• Our workstations do not have CD R/W drives.
• The USB ports at the workstations are disabled.
• Document storage area is well protected.

IT Security

• Every workstation is installed with anti-virus software which checks for updates daily. A quick scan is done on a daily basis. We have boot scan and full scan scheduled on weekly and monthly basis respectively.
• The anti-malware software on all computers does a quick scan twice a day.
• The access to company’s network is protected by default windows firewall software.
• All the computers are password protected. Every user has his/her password which is compulsorily changed every 42 days.
• All users have restricted access to client information. Only authorized users have access to the restrictive information of the clients that they are working for.
• We have different account management policies like deactivation of accounts after separation of affiliation. The account access requirements are reviewed regularly for changes.
• The session controls on all the workstations and servers are implemented for added security. The server is configured to LOCK after 5 minutes of unattended time. It requires re-authentication to unlock again. All computers are configured to LOCK after 10 minutes of unattended time. They would require re-authentication to unlock again.
• Various backup operations are scheduled to prevent the loss of data. We have a previous version backup scheduled twice a day. The differential backup is scheduled weekly whereas the Full backup is scheduled monthly.
• The use of personal email accounts is not allowed to the users. The access to various Internet sites is also restricted and controlled.
• We are moving towards a paperless environment which serves the purpose of being eco-friendly as well as ensuring security of data.
• We also have IP authentication to restrict outsider access to confidential information within the office.

Confidentiality

• All employees are bound by stringent non-disclosure and non-compete agreements.
• We recognize that all the data and information provided by the client is confidential and strictly the property of the client.
• No one at Eworkk shall ever disclose any client information to any third party without the prior consent of the client.
• All raw and processed data whether in electronic format or in printouts will be destroyed once the work is over.