Data Handling Due Diligence Statement

BODEX Data Handling
Due Diligence Statement

Sensitive data management comprises of three key elements: People, Technology, and Processes. We ensure thorough diligence in managing data from every angle.

This Data Handling Due Diligence Statement outlines BODEX’s commitment to responsibly handling our client’s data in accordance with applicable laws, regulations, and DAMA best practices. This statement has been written specifically in reference to our SaaS product KPI-Dash, which takes our client’s data as Input and creates visualizations and reports and broadly for ALL data handling performed by BODEX Team members.

Cybersecurity and Data Standard References

At BODEX, we adhere to the best practices recommended by these esteemed Cybersecurity and Data Management organizations.

Click on any of these aspect to see our approach

We collect only the data needed to operate KPI-Dash, shared only with BODEX personnel for maintenance and performance. No other data is collected, unless directed and approved by the Clients

Data is processed securely and per data protection laws. Only authorized personnel access necessary data. Follows principles of minimization, accuracy, and confidentiality. KPI-Dash AI uses local or cloud-hosted LLMs. Cloud LLMs use data obfuscation for anonymity.

Data stored securely with encryption and access controls. Protected against unauthorized access or changes. AES-256 encryption used for data in transit. Data obfuscation adds extra security. Read-only data is used for reports and visualizations. Read-only data is imported into a secure PostgreSQL DB with limited VM access.

We do not disclose data to third parties unless mandated by law.

We have procedures in place to detect, respond to, and recover from data breaches promptly. Clients affected by data breaches are notified as required by law and provided with appropriate support.

We conduct regular audits to ensure data handling complies with our policies and legal standards. This statement is reviewed periodically and updated to reflect changes in our data handling practices or regulatory environment.

Conclusion

We take pride in our responsibility for managing sensitive data, including state-level information and data from multi-billion-dollar corporations. Our commitment to maintaining the highest standards of security and integrity ensures that this critical information is handled with the utmost care and professionalism. We recognize the importance of these data assets and are dedicated to implementing best practices in data management and cybersecurity to protect them effectively. BODEX Is dedicated to upholding the highest standards of data protection and privacy. Access to data is restricted to a need-to-know basis only. This Data Handling Due Diligence Statement reflects our commitment to stakeholders, showcasing our responsibility towards effective data management.