Policies

To set expectations for the acceptable use of Crystal Project Inc systems, accounts, and data, so that company and customer information stays secure.

To ensure that access to systems, infrastructure, and data is restricted to authorized individuals based on role and business need.

To ensure that organizational assets are identified, appropriately protected, and managed throughout their lifecycle.

To ensure the continued availability of critical systems and services and to define recovery strategies in the event of regional, infrastructure, or…

To ensure appropriate and effective use of cryptographic controls to protect the confidentiality, integrity, and authenticity of information processed by…

To define how Crystal Project Inc. (“Crystal”) classifies, protects, retains, and securely disposes of information in accordance with business, contractual,…

To ensure that employees and contractors understand their information security responsibilities and are suitable for their assigned roles based on risk and…

To define how Crystal Project Inc identifies, responds to, and resolves security incidents affecting systems, infrastructure, or data.

This policy defines Crystal Project Inc’s overall approach to information security governance and establishes the framework under which specific security…

This policy defines information security roles and responsibilities within Crystal Project Inc. (“Crystal”) to ensure accountability, clarity, and effective…

To ensure the secure and reliable operation of production systems and supporting infrastructure used by Crystal Project Inc.

To define the physical security controls appropriate to a remote-first organization and to protect company assets and customer data from physical loss, theft,…

To ensure that information security and operational risks are identified, evaluated, and managed in a manner proportionate to the size and complexity of…

To ensure that security is integrated into the design, development, testing, and deployment of Crystal Project Inc systems and applications.

To ensure that third-party service providers who access, process, store, or transmit company or customer data maintain appropriate security controls consistent…

Crystal Project Inc. (“Crystal”) is committed to acting ethically and with integrity in all business dealings. This policy sets out Crystal’s approach to…

Crystal Project Inc. (“Crystal”) is committed to lawful and ethical conduct in all aspects of its operations. This Whistleblower Policy is intended to…

Crystal Project Inc. (“Crystal”) is committed to fostering an inclusive, collaborative, and professional working environment. This Code of Conduct defines…