GOVERNANCE AND SECURITY
Security policies
The policies that define how AiInventoryPro.com protects access, information, and authentication on aiinventorypro.com and all of its subdomains.
WF-SEC-001 · Version 1.2
Information Security Policy and Program
Security responsibilities, data safeguards, incident response, recovery, and continuous improvement.
WF-SEC-002 · Version 1.3
Access Control Policy
Account approvals, least privilege, tenant boundaries, sign-in protection, session limits, access agreements and removal of access.
WF-SEC-003 · Version 1.3
Multifactor Authentication Policy
Email verification codes for every workspace and platform sign-in, trusted devices, recovery, retry limits and documented exceptions.
WF-SEC-004 · Version 1.2
Data Retention and Deletion Policy
Retention periods, secure disposal, privacy requests, legal holds, backup handling, and periodic reviews.
WF-SEC-005 · Version 1.2
Workspace Backup and Recovery Policy
Weekly routine backups, optional paid cloud storage, customer schedules, selectable contents, recovery, and service responsibilities.
WF-SEC-006 · Version 1.2
Security Incident Response Policy
Reporting, triage, containment, investigation, customer and regulatory notification, recovery and lessons learned.
WF-SEC-007 · Version 1.2
Encryption and Key Management Policy
Encryption in transit and at rest, secrets storage, key ownership, rotation and revocation.
WF-SEC-008 · Version 1.2
Vendor and Third-Party Risk Policy
Due diligence, contracts, data access and ongoing review of hosting, email, payment, banking and AI service providers.
WF-SEC-009 · Version 1.2
Secure Development and Change Management Policy
Security requirements in design, code review, testing, release approval, rollback and emergency changes.
WF-SEC-010 · Version 1.2
Logging and Monitoring Policy
What is logged, protection of logs, review, alerting and retention.
WF-SEC-011 · Version 1.2
Business Continuity and Disaster Recovery Policy
Recovery objectives, platform backups, restore testing, hurricane and outage planning, and communication.
WF-SEC-012 · Version 1.2
Vulnerability and Patch Management Policy
Finding and fixing weaknesses: updates, scanning, severity deadlines and responsible disclosure.
WF-SEC-013 · Version 1.2
Acceptable Use Policy
Rules for AiInventoryPro.com staff and contractors using company systems and customer data.
WF-SEC-014 · Version 1.2
Data Classification and Privacy Policy
Data categories and handling rules, customer ownership of workspace data, personal information and privacy requests.
WF-SEC-015 · Version 1.2
Security Awareness and Training Policy
Security training for staff and contractors, role-based training, and guidance for customer users.
Questions about these policies
Contact AiInventoryPro.com for policy questions or supporting information.