Skip to content

Information Security Policy

Please review this document to understand how Praxis Tech operates and its commitment to information security.

Our Commitment

Praxis Tech Ltd. is dedicated to safeguarding the confidentiality, integrity, and availability of information. We achieve this by implementing and continuously enhancing a robust Information Security Management System (ISMS) in alignment with the ISO 27001 standard and our strategic business goals.

Praxis Tech is also committed to protecting personal and sensitive data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR). Information security practices are integrated with data privacy principles to ensure lawful processing, confidentiality, and integrity of personal data.

Scope

Our ISMS encompasses the following key areas:

  1. Providing a secure technological platform for online payments for merchants.


  2. Enabling seamless integration with Payment Service Providers for merchants.

Our Objectives

We strive to:

  1. Inspire confidence in all stakeholders, including clients, partners, and employees.


  2. Minimize the risk of data breaches, protecting sensitive information from unauthorized access and disclosure.


  3. Ensure the confidentiality, integrity, and availability of information, maintaining its accuracy, completeness, and accessibility.


  4. Continuously improve the effectiveness of our ISMS, adapting to evolving threats and best practices.


  5. Comply with all applicable legal, regulatory, and contractual security obligations.

Our Approach

  1. Resources: We allocate the necessary financial, technical, and human resources to support and enhance our information security efforts.


  2. Risk Management: We employ a comprehensive risk management methodology to identify, assess, and mitigate potential threats to information security. This includes regular risk assessments and reviews.


  3. Clear Roles and Responsibilities: We define and assign clear roles and responsibilities for the operation, maintenance, control, and improvement of our ISMS.


  4. Policies and Procedures: We develop and implement comprehensive security policies and procedures that are readily accessible to all employees.


  5. Monitoring and Measurement: We continuously monitor, measure, and evaluate the effectiveness of our ISMS against predefined goals and metrics.


  6. Internal Audits and Corrective Actions: We conduct regular internal audits to identify and address any security gaps or deviations.


  7. Incident Management: We have established procedures for managing security incidents effectively.


  8. Business Continuity and Disaster Recovery: We maintain and regularly test business continuity and disaster recovery plans to ensure business resilience.


  9. Supplier Evaluation: We evaluate our suppliers' adherence to information security principles.


  10. Training and Awareness: We provide regular training and awareness programs to all personnel on information security best practices.

Policy Adherence

  1. All employees, clients, suppliers, and other interested parties of Praxis Tech Ltd. are required to adhere to this policy which is communicated to them by posting it to our website. It is reviewed annually by the Information Security Committee & Management Board to ensure its continued applicability and suitability.


  2. Questions, comments and requests regarding this Information Security Policy should be addressed to infosec@praxis.tech. Alternatively, you can write to us at: PRAXIS TECH LTD, 39 Kolonakiou Avenue, Frema Plaza, 2nd Floor, Office 201 Ayios Athanasios, 4103 Limassol, Cyprus.