Terms of business:
Client related policies

• should not be made to induce certain acts or inactivity, or would not give rise to preferences or prejudices, or could not be regarded as a bribe;
• must comply with local laws and business etiquette traditions;
• should be donated on behalf of the organization and not on behalf of the individual;
• should not be in the form of cash or other cash equivalent;
• must be acceptable and appropriate in the circumstances;
• should correspond to the generally accepted understanding (not to cause surprise) concerning characteristics of such gifts including value and the reason for the gift;
• should be donated openly, not secretly.

• to transfer, promise to transfer, or offer money, a gift, or to show excessive hospitality with the expectation that this will give an advantage or that such an advantage has already been given;
• to transfer, promise to transfer, or offer money, a gift or to show excessive hospitality towards civil servants, subjects of power, or their representatives for "facilitating" or accelerating routine procedures;
• to accept a payment from third parties, in respect of which it is known in advance or it can be reasonably assumed that such payment implies the receipt of benefits by them;
• to accept a gift from a third party in respect of which it is known in advance or it can be reasonably assumed that the gift was offered with the expectation that the Company will give some advantage to such third party;
• threaten or harass an employee who refuses to engage in bribery, or exposes such bribery, or expresses concern about compliance with this policy;
• participate in any activity that may violate this policy.

• High Content from Post-Consumer Recycled Materials
• Low Embodied Energy (consumed to extract, manufacture, distribute and dispose)
• Recyclable, Compostable and Biodegradable
• Non-toxic
• Energy Efficient
• Durable and/or Repairable
• Produced in a Manner that Demonstrates Environmental, Social, and Ethical Values
• Minimal Packaging (packaging should also abide by the above principles)
• Afterlife Reuse/Regeneration Potential through the Company (carpeting, furniture, etc.)

• Computer and processor 1 gigahertz (GHz) or faster
• Memory 2 GB RAM
• Hard disk 3 GB available disk space
• Display - any screen resolution
• Operating system - for the best experience, use the latest version of any operating system.
• Browser - any

Operating system - any

• Chrome 21+ (recommended)
• Firefox 28+
• Edge 12+
• Safari 7+
• Opera 17+
• Android 6.0+

• Client's database
• Client's files
• Encrypted Passwords
• Private Email Addresses

• Cloud service providers
• Database consultants
• Security auditors
• Financial auditors

• Compromise of a database server that contains private user data with evidence that an attacker may have had access to or copied the data off-site.
• Compromise of an application server account that has access to private user data and evidence that the attacker has downloaded or accessed private data.
• Theft of a device known to contain private user data.
• Web application attack used to download a list of all user emails and encrypted passwords.

• Compromise of an application server that does not contain or have access to private user data.
• Compromise of a team member application account that does not have access to private user data.
• Malware infection on a server or team member computer system that does not contain private user data.
• Compromise of non-sensitive user data such as login IP addresses, login history, project permissions.
• Unintentional disclosure of project names, group names, issue titles, or project or user metadata unless this data can cause damage to the user or their business.
• Discovery of a vulnerability that could have been used to compromise private data, but for which there is no evidence of exploitation.
• Theft of a team member's mobile device that does not contain private user data.
• Theft of a team member's private keys, tokens, or other credentials provided there is no evidence they were used to access private user data.

• A summary of the problem
• A severity rating of 1 — 5 (1 being least severe, 5 being most ie. you can easily hijack, impersonate or access any other account or data)
• A PoC or breakdown of how to replicate the issue
• The operating system name and version as well as the web browsers name and version that you used to replicate the issue

• Alexey Yankovsky, ISACA
• We've been working closely with Alexey and his team at ISACA Kyiv Chapter to identify key weaknesses within our app. They've continuously proven to be experts in identifying weaknesses. They have helped us identify and resolve potential security holes such as account hijacking, access token leaks, XSS and CSRF exploits.

Ethicontrol SaaS product is a multi-tenant service. This means that SaaS services are used concurrently by a number of subscribers. If a single customer places very high demands on the service then it is possible that this will affect the experience for other users.

The vast majority of our customers use their service considerately and their usage levels during peak hours don’t disproportionately affect the shared network and service capacity. Even though only a very small number of our customers may use the service inappropriately, their activity has the potential to affect the service for others.

Our Fair Use Policy manages the inappropriate use and makes sure the service can be used fairly by everyone.

In an urgent or extreme case, for example where services are likely to be significantly impacted, or where we believe your system or ours is under attack (a DDOS - denial of service attack for instance) or where we believe your system or ours has been compromised (for example a hacker or potential a security breach) we may stop the services, or temporarily block your access to them. Before we do this, or in urgent situations immediately after doing so, we'll always contact you to discuss possible solutions.

In some cases, even without an attack or breach, if your use of the services continues to impact other users, is expected to do so, or is generating costs to us that are not normal when compared to other customers on the same contract and make our service to you unprofitable to maintain, we may isolate your services from the multi-tenanted environments and pass the costs onto you. Before we do this, or in urgent situations immediately after doing so, we'll always contact you to discuss possible solutions.

The Customer shall not access, store, distribute or transmit any Viruses, or any material during the course of its use of the Services that:

(a) is unlawful, harmful, threatening, defamatory, obscene, infringing, harassing or racially or ethnically offensive;

(b) facilitates illegal activity;

(c) in a manner that is otherwise illegal or causes damage or injury to any person or property; and Ethicontrol reserves the right, without liability or prejudice to its other rights to the Customer, to disable the Customer’s access to any material that breaches the provisions of this clause.