Welcome to the CELITECH Trust Center. This portal provides a comprehensive overview of CELITECH's commitment to security, privacy, and compliance, offering transparency into our practices and controls.
At CELITECH, we are dedicated to protecting the data we own and process. Our information security policy outlines our expectations and requirements for maintaining proper security and data protection. We continuously monitor our security program and adapt to changes in the security and compliance landscape, business operations, regulatory requirements, and industry standards.
Our security objectives focus on implementing, monitoring, and managing controls to ensure the confidentiality, integrity, and availability of data. This includes robust practices in areas such as Identity and Access Management, Application Security, Network Security, Data Retention and Disposal, Encryption, and Logging and Monitoring. We also have a dedicated Engineering team responsible for product security, endpoint security, and SaaS security, working in shared responsibility with our IT Team.
CELITECH maintains a strong compliance posture, with internal teams dedicated to obtaining, monitoring, and managing adherence to applicable frameworks, standards, and industry best practices. Our Compliance Team, in partnership with Legal, monitors all relevant regulatory and legal requirements. Key areas of our compliance program include internal and external audit management, risk management, privacy, vendor (third-party) management, and policy management.
We conduct regular risk assessments using industry-recognized standards and compliance frameworks to identify, mitigate, and manage risks effectively. Furthermore, we have a comprehensive Logging and Monitoring Policy to ensure frequent monitoring and maintenance of audit trails, which are crucial for assessing information system controls and security. Our Incident Response Plan outlines clear procedures for identifying, reporting, investigating, and responding to information security incidents, with defined roles and responsibilities for timely resolution. We also ensure ongoing monitoring of all active vendors through our Compliance Team.
This Trust Center serves as a central resource to explore the detailed policies and procedures that underpin our commitment to trust and security.
Compliance
We adhere to industry best practices and we are working towards compliance certifications.
Risk Profile
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
Reports
We may provide security-related reports upon request.
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
AI
We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.
ESG
We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes.
Legal
We take legal matters seriously and we always engage our legal counsel to review all commercial activities. Please contact us if you have any questions.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
