QUALITY AND INFORMATION SECURITY POLICY

DOERS DIGITAL FACTORY S.L. (hereinafter DOERS DF) is a leading and highly experienced company in the digital services sector, specialising in commercialisation, digital marketing, brand and logo design, digital product creation, custom software development, digital experiences and digital consultancy, all delivered with agile methodologies.

At DOERS DF, the quality of our services and the security of information are essential to guarantee the confidentiality, integrity and availability of the data of our clients, employees, suppliers and other relevant interested parties. This policy sets out the principles and guidelines that ensure every asset and resource (technological, human, process) is used and managed in a way that maximises client satisfaction, protects information and secures business continuity, minimising damage and maximising the return on investment and business opportunities, as well as continuous improvement.

DOERS DF assumes the commitment and leadership of the Integrated Quality and Information Security Management System, and therefore declares its commitment to:

  • Meet all the requirements established in the Quality Management System, in accordance with the requirements of the ISO 9001:2015 standard, and in the Information Security Management System, in accordance with the requirements of the ISO 27001:2022 standard, as well as the legislation applicable to the organisation.
  • Reconcile the profitability of our economic activity with the maximum satisfaction of our clients' needs and expectations, offering digital services and solutions that meet or exceed their quality expectations.
  • Work rigorously to deliver a quality service and to put the most innovative technology within our clients' reach, ensuring the proper use and protection of information throughout the entire life cycle of our digital solutions.
  • Maintain and continuously improve the effectiveness of the Integrated Management System in order to offer clients better products and services and more robust security management.
  • Advise on the needs of each client and offer the digital solution that best fits them, always recommending the most appropriate and secure option.
  • Set and review the company's improvement objectives, which are the basis for the continuous improvement of the Integrated Management System (IMS), and implement effectiveness indicators that assess the performance of the IMS in line with the established policy.
  • Ensure the confidentiality, integrity and availability of the information of DOERS DF and its clients, in order to minimise financial, operational or legal impacts arising from security incidents.
  • Guarantee the availability of its processes and the continuity of its digital services and solutions based on the impact that adverse events may cause (including cyberattacks and technological failures).
  • Protect the information, assets and technological infrastructure (cloud platforms, servers, networks, applications) supporting its critical processes through the application of robust controls.
  • Promote a culture of quality and information security across the organisation, including training and awareness programmes for all employees, and establish the consequences of policy violations.
  • Prevent and detect any virus, malware and other cybersecurity threats, through specific policies and contractual agreements with organisations specialising in cybersecurity.
  • Carry out quality and information security risk assessments to identify and implement controls that mitigate the impact of the risks identified in our processes and services.
  • Develop and maintain business continuity and disaster recovery plans that ensure the operational resilience of our digital services.
  • Maintain the reputation of the brand with regard to service quality and data security.
  • Properly manage the information life cycle (from creation to secure destruction), so that incorrect or unauthorised uses are avoided at any stage.
  • Ensure that suppliers and third parties who access DOERS DF data or systems comply with our quality and information security policies.
  • The organisation's personnel will actively participate in the management of incidents related to services and information security, in order to restore normal operating levels as quickly as possible and minimise the adverse impact of such incidents on the organisation.
  • Ensure the protection of the intellectual property rights of DOERS DF and of third parties.
  • Periodically establish a set of objectives and indicators that allow management to properly monitor the service levels offered and the IMS management activities.
  • Management commits to providing the resources needed to maintain and continuously improve the Integrated Quality and Information Security Management System.