Our approach to security
As we run consulting and implementation projects for B2B clients, we regularly work with confidential information, operational data, organizational structures, and IT infrastructure.
Our approach to security
As we run consulting and implementation projects for B2B clients, we regularly work with confidential information, operational data, organizational structures, and IT infrastructure.
Our security approach is based on three principles: confidentiality, integrity, and availability.
Every project is run under an NDA. Access to client data is restricted solely to project team members.
Data protection system covers
- Identity and access management
- Data and resource access control
- Data carrier protection
- Security event logging
- Antivirus and endpoint security
- Security monitoring and alerting
- Availability and business continuity
- Virtualization environment protection
- Device and hardware protection
- Network segmentation and perimeter protection
- Encryption at rest and in transit
- Incident detection and response
Key security areas
Access Control and Authentication
We implement a restrictive permissions model based on minimum privilege. Each project has clearly defined roles and access scope.
Confidentiality and NDA
All projects run under NDAs. We treat client information with the utmost care.
Infrastructure Security
Data is processed in on-premise, private cloud, or hybrid environments aligned with client IT policy.
Incident Management
We have incident response procedures covering identification, escalation, threat elimination, and client communication.
GDPR Compliance
Personal data processing complies with GDPR. We are ready for audits and certification.
Client Data Protection
Client data is not shared with third parties beyond contractually specified cases. We apply encryption at rest and in transit.
Data Controller
The data controller is DACOST CONSULTING Sp. z o.o., ul. Hoża 86/410, 00-682 Warsaw, KRS 0001162111, NIP 7011250738.
We process personal data only to the extent necessary to provide services. Data is not shared with third parties except as expressly stated in the contract.
For data protection inquiries: info@dacost.pl
Questions about security?
We will gladly explain our procedures and adapt them to your organization's requirements.