Security statement

Our security statement outlines the rigorous technical and organizational measures—including encryption and proactive monitoring—that we use to protect your data from unauthorized access.

Security Statement

This Security Statement applies to all products, services, websites, applications, APIs, and platforms operated by GoAgile Technologies, including ezInvoice and its associated services, unless otherwise specified.

At GoAgile Technologies, we understand that our customers entrust us with critical business and financial data. Protecting the confidentiality, integrity, and availability of that information is a core responsibility. We are committed to maintaining strong security controls and transparency regarding our security practices.

Physical Security

Our systems and infrastructure are hosted within industry-leading cloud and data center environments that maintain internationally recognized security standards and certifications. Physical security controls include continuous monitoring, restricted access, surveillance systems, visitor management procedures, and other safeguards designed to protect critical infrastructure.

Access Control

Access to production systems and customer data is strictly controlled through secure authentication mechanisms, including multi-factor authentication (MFA) where applicable. Access is granted based on the principle of least privilege and only to authorized personnel whose job responsibilities require it.

Access permissions are reviewed periodically and immediately revoked when personnel no longer require access.

Security Policies

GoAgile Technologies maintains documented information security policies and procedures that are reviewed and updated regularly. Employees are required to acknowledge and comply with these policies as part of their responsibilities.

Personnel Security

All employees and contractors with access to sensitive systems are required to follow confidentiality obligations and security best practices. Security awareness and privacy training are conducted regularly to ensure ongoing compliance with company security standards.

Security Operations

GoAgile Technologies maintains security processes designed to identify, assess, and respond to security threats and vulnerabilities. Security monitoring activities include infrastructure monitoring, log analysis, vulnerability assessments, and incident response procedures.

Vulnerability Management

We maintain a vulnerability management program that includes:

• Regular vulnerability scanning
• Security assessments
• Timely remediation of identified risks
• Security patch management
• Periodic penetration testing

Security findings are prioritized and remediated based on risk and severity.

Encryption

Customer data is protected using industry-standard encryption technologies.

• Data in transit is encrypted using secure TLS protocols.
• Data at rest is encrypted where supported by the underlying infrastructure and storage services.

Secure Development

Our development teams follow secure software development practices based on recognized industry standards, including OWASP recommendations.

Security measures include:

• Secure coding practices
• Peer code reviews
• Testing before deployment
• Environment separation (development, testing, and production)
• Change management procedures
• Audit logging

Asset Management

GoAgile Technologies maintains an inventory of information assets and applies appropriate controls for their protection, retention, and disposal.

Company-managed devices used to access production systems are protected through security controls such as device encryption, endpoint protection, and access management policies.

Incident Management

We maintain documented incident response procedures designed to:

• Detect security incidents
• Investigate potential threats
• Contain and remediate security events
• Communicate with affected customers when required
• Maintain records for compliance and auditing purposes

Security Incident Notification

While no system can guarantee absolute security, GoAgile Technologies is committed to promptly addressing security incidents and notifying affected customers when required by applicable laws, regulations, or contractual obligations.

Business Continuity and Backup

We maintain backup and recovery procedures designed to support service continuity and minimize potential data loss.

Backups are protected using appropriate security controls and are periodically tested to verify recoverability.

Logging and Monitoring

Application and infrastructure systems generate security and operational logs that are centrally monitored and retained according to operational and compliance requirements.

These logs assist with:

• Security monitoring
• Performance analysis
• Troubleshooting
• Incident investigation
• Audit requirements

Customer Responsibilities

Security is a shared responsibility. Customers are encouraged to:

• Use strong passwords
• Enable multi-factor authentication where available
• Protect user credentials
• Maintain secure internal systems and networks
• Monitor account activity regularly

Contact

For security-related inquiries, vulnerability reporting, or compliance requests, please contact:

Security Team
 ezInvoice
Email: security@einvoice.sa.com