Founded in 2024 Reflow recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners. As a service provider/product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Reflow so that our customers can feel confident in choosing us as a trusted provider. This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve. ## Resources (42) Here are the important security policies and documents which are a part of Reflow’s compliance program. ### Policies 1. Operations Security Procedure 2. Access Control Procedure 3. Acceptable Usage Policy 4. Business Continuity Plan 5. System Acquisition and Development Lifecycle Policy 6. Compliance Policy 7. Code of Business Conduct Policy 8. Personal Data Breach Notification Procedure 9. Media Disposal Policy 10. Vendor Management Policy 11. Network Security Procedure 12. Communications & Network Security Policy 13. Data Retention Policy 14. Endpoint Security Policy 15. Data Breach Notification Policy 16. Incident Management Policy 17. Asset Management Policy 18. Vendor Management Procedure 19. Compliance Procedure 20. Asset Management Procedure 21. Physical & Environmental Security Policy 22. Operation Security Policy 23. SDLC Procedure 24. Information Security Policy 25. PHI Data breach Notification Procedure 26. HR Security Policy 27. Organization of Information Security Policy 28. Physical and Environmental Security Procedure 29. Access Control Policy 30. Encryption Policy 31. Business Continuity & Disaster Recovery Policy 32. Risk Assessment & Management Policy 33. Data Classification Policy 34. HR Security Procedure 35. Incident Management Procedure 36. Data Protection Policy 37. ISMS Information Security Roles & Responsibilities 38. ISMS Manual 39. ISMS Scope Document 40. Privacy By Design Policy ### Documents 1. System Description 2. Pentest Report