About Us

All parties authorized to access Elaw’s information assets must comply with the Company’s guidelines for the handling and care of the assets and information with the aim of using them for the specific purposes of the Company, its areas, and for strictly professional purposes.

Backups and data protection are fundamental for business continuity, services offered to customers, and the activities of the respective areas. For this purpose, the company provides repositories for all employees and has guidelines for backups of databases, applications and technical requirements. Elaw is not responsible for taking care of files left on workstations or any other locations other than the company’s official drive.

Elaw’s information, assets and environments are protected against unauthorized access and to this end, access control guidelines must be observed to prevent compromise of credentials, unauthorized access, data breaches and uncontrolled data exposure. Unauthorized access to Elaw systems by any means, whether through application access processes, website log-in screens, networks and the like, is strictly prohibited. Elaw rejects any activity that violates good information security practices, such as sharing passwords, forwarding confidential files, unauthorized access and others. A sequence of good practices can be found in our set of Information Security policies which should be known and adopted by all employees.

A set of information security best practices has been adopted for the secure development of Elaw Tecnologia software. Secure development processes should be analyzed at the beginning of any project that may involve such activity.

Information security incidents are registered and treated through specific procedures. To ensure the integrity of the information security pillars, it is of utmost importance that they are pointed out when any transgression against the rules set forth in this policy or the others mentioned herein is identified.

Significant changes to Elaw’s systems and computing resources in its production or high impact environments must be adequately addressed to mitigate unplanned events and thus minimize unwanted effects.

Measures for classifying the Company’s information are adopted practices that must be followed by everyone authorized to access its information assets and have the purpose of ensuring the proper treatment for the data and information of Elaw Tecnologia and its customers. Classification processes must comply with the provisions of the Company’s supplementary policies. Access to unclassified information or data does not exempt the responsibility to treat them with the appropriate level to which their content fits.

Information at Elaw Tecnologia is classified to facilitate the identification and ensure the correct treatment for each type of data, information, electronic or printed document and its derivatives. The clean desk policy is directly related to the information classification guidelines and acceptable use of its assets, therefore, they must be observed when using any company information.

Hiring and dismissal processes at Elaw Tecnologia are performed by means of procedures adopted by the responsible areas. During hiring, both new and future employees are subjected to processes aimed at ensuring information security, regardless of the activity to be performed.

Systematics for the definition and selection of Elaw Tecnologia’s external suppliers/providers can be consulted in the policies for the same. Eventually, they are submitted to analysis processes both for effectiveness, performance and adherence to information security guidelines. Elaw reserves the right to audit such vendors for compliance assurance.