Security Policy
At Weecover, information security and personal data protection are fundamental pillars of our business. As a technology company serving the insurance sector, we understand that the trust of our clients and partners depends on our genuine, verifiable commitment to the security of the information entrusted to us.
Our approach
We operate an Information Security Management System (ISMS) based on the international standard ISO/IEC 27001, within the framework of which we continuously audit and improve our technical and organizational controls. This system covers our entire technology infrastructure as well as our development and operations processes. Our infrastructure is hosted exclusively in data centers located within the European Union, featuring data encryption both in transit and at rest, along with strict access controls based on the principle of least privilege. We comply with the General Data Protection Regulation (GDPR) in all our processing of personal data, and we align our technology risk management with the requirements of the Digital Operational Resilience Act (DORA), including the oversight of our supply chain of technology vendors and subcontractors.
Supplier management
All our technology vendors are evaluated and approved according to information security and data protection criteria before entering into any service relationship, and are subject to periodic review.
Transparency and Verification
We make supporting documentation for our policies, controls, and compliance status available to our clients and partners through our Trust Center:
👉 ACCESS TRUST CENTER
For any inquiries regarding information security or data protection, you may contact our Data Protection Officer at security@weecover.com.