Quality and Information Security Policy

hex group icon medium
Hexa is committed to delivering consulting, outsourcing, nearshoring, and specialized training services within a professional context, ensuring the information security of all our clients and partners, in compliance with ISO 9001, ISO 27001, and applicable legislation.
QUALITY

Customer Satisfaction: We place customer satisfaction at the core of our operations, continually striving to understand and exceed their needs and expectations.

Continuous Improvement: We implement a quality management system that promotes the continuous improvement and effectiveness of our processes, products, and services.

Compliance: We ensure that all our services comply with applicable legal, regulatory, and contractual requirements.

Empowerment: We invest in the ongoing development of our employees' competencies, fostering aculture of quality and excellence.

Social and Environmental Responsibility: We adopt responsible attitudes and practices towards the environment and social well-being.


INFORMATION SECURITY

Confidentiality: We ensure that information is accessible only to authorized individuals and protected against unauthorized access.

Integrity: We maintain the accuracy and completeness of information and processing methods.

Availability: We guarantee that information and processing systems are available when needed.

Risk Management: We implement a systematic approach to identify, assess, and address information security risks.

Compliance: We adhere to all applicable laws, regulations, and standards related to information security, including ISO 27001.

RESPONSABILITIES

Top Management: Top management is responsible for establishing, implementing, and maintaining this policy, ensuring it is communicated and understood by all employees.

Employees: All employees are responsible for adhering to this policy and actively participating in the continuous improvement of our quality and information security management systems.

Review: This policy will be reviewed whenever there are significant changes in our processes or the regulatory environment.

To ensure the protection and security of our clients' confidential and critical information, Hexa enforces rigorous selection and admission measures for new employees. In compliance with ISO 9001 and ISO 27001 standards, all candidates for positions involving access to sensitive information are required to present an up-to-date criminal record certificate. This measure aims to ensure that employees have a history of integrity and reliability, aligned with our information security and quality standards.

READ MORE ABOUT QUALITY AND INFORMATION SECURITY POLICY