Cloud Security Policy
Numerical Technologies (hereinafter referred to as 'the Company') recognizes maintaining a high level of security and its continuous improvement as a critical responsibility in providing cloud services. In addition to the Information Security Policy, the Company has established the following "Cloud Security Policy" to ensure safe and secure service delivery.
1. Application of Information Security Requirements
The Company designs and implements cloud services based on customers' information security requirements, the Information Security Policy, and this policy.
2. Logical Isolation in the Cloud Environment
The Company utilizes virtualization infrastructure provided by cloud service providers to logically separate each customer's environment, ensuring safe service delivery.
3. Measures Against Insider Threats
To address risks of fraudulent acts by internal personnel, the Company engages in continuous education and training and strengthens internal management systems.
4. Security in Virtualized Environments
Except as specified in the Company's service specifications, customer data is stored logically separated from other customers' data within the virtualization environments provided by cloud service providers.
5. Protection of Customer Information Assets
The Company implements appropriate access management and protection measures for customer information assets handled in the cloud service. Access by the Company's employees is limited to what is necessary for business and is properly recorded and audited.
6. Handling of Information Sharing
If violations of laws, contracts, or security-related issues related to the cloud service are detected, the Company will respond sincerely and as much as possible, including notification, investigation cooperation, and submission of legal documents.
7. Response to Information Security Incidents
If an information security incident occurs in the cloud service, the Company will respond promptly. If it may affect the customer's service use, notification will be made swiftly through the contract or agreed methods. The Company also clarifies the contact structure for incidents to customers in advance.