Confidentiality policy
1. Duty of Confidentiality
n
Vexor Certification, its permanent staff, subcontracted auditors, and committee members treat all information acquired during the certification process as strictly confidential.
nn
2. Non-Disclosure Obligations
n
No proprietary client information, product specifications, financial records, customer lists, or audit findings will be disclosed to any third party without explicit prior written authorization from the client.
nn
3. Permitted Disclosures
n
Confidentiality obligations do not apply to:
n
- n
- Information that is already within the public domain.
- The public status of a certificate (e.g. Valid, Suspended, Withdrawn) published in the public register.
- Disclosures required by law, court order, or competent regulatory authority. In such cases, the client will be informed in writing prior to disclosure, unless prohibited by law.
n
n
n
nn
4. Data Storage and Disposal
n
All client files, audit work papers, and evidence submissions are stored within secure digital systems with encrypted access controls and retained in accordance with our data retention schedule.