arkoselabs.com, as data

After Bots — a new book by our founder on classifying AI agents. Now available2. Antivirus software is installed on workstations and laptops for personnel with access to the services systems environment.3. Company has security policies that are approved by management.4. Data transmission over Client portal is encrypted via Transport Layer Security (“TLS”). Access to the internal administrator tool is controlled via VPN.5. Company performs and/or contracts with third-party vendors to perform SOC 2 Security audits, external vulnerability scans, comprehensive internal vulnerability scans, and penetration testing.6. Vendor systems are subject to review at least annually as part of the vendor risk management process, including reviewing independent third-party reports.7. Company has documented incident response and business continuity plans, including disaster recovery and backup restoration, which is reviewed at least annually.8. Company schedules regular system backups to protect data loss in the event of a system failure. Restoration from backups is performed on an as-needed basis, or at least annually, to verify adequate recovery.### Organization of Information and Personnel Security1. Company has formal organizational structures and defined roles, which includes departmental reporting lines with defined structures and responsibilities.2. Employees are presented with an employee handbook which includes a code of conduct and statement of integrity.3. Company has defined job descriptions for personnel responsible for designing, developing, implementing, operating, monitoring, and maintaining the information security.4. Verification checks are performed on full-time employees when appropriate and permitted by local laws.5. The technical competence of any personnel in a technical position is evaluated during the screening process.