Calmo - Trust Center - Security & Privacy

Calmo recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.

As a service provider/product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Calmo so that our customers can feel confident in choosing us as a trusted provider.

This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

Founded in 2024

Compliances (3)

GDPR

Compliant

SOC 2

In progress

ISO 27001

In progress

Controls

Continuously monitored

Product security (2)

Production System User Review

Situational Awareness For Incidents

Data security (11)

Identity Validation

Termination of Employment

Production Databases Access Restriction

Network security (5)

Limit Network Connections

External System Connections

Anomalous Behavior

App security (3)

Conspicuous Link To Privacy Notice

Secure system modification

Unauthorized Activities

Endpoint security (5)

Malicious Code Protection (Anti-Malware)

Full Device or Container-based Encryption

Endpoint Security Validation

Corporate security (31)

Code of Business Conduct

Organizational Structure

Roles & Responsibilities

Resources (41)

Acceptable Usage Policy

Acceptable Usage Policy outlines proper use of company systems, tools, equipment and data to protect critical information.

Access Control Policy

Access Control Policy ensures that access to company assets is controlled based on business and security requirements.

PHI Data breach Notification Procedure

PHI Data Breach Notification Procedure outlines steps to promptly notify affected individuals and regulatory authorities in the event of a breach of Protected Health Information (PHI), ensuring compliance with HIPAA regulations