At ZEO Technology we work according to information security standards based on UNE-ISO 27001. This allows us to offer customers a comprehensive, personalized service with a high degree of professionalism and information security, focused on manufacturing technological products for business digitalization.
We understand that information is a high-value asset for our organization and our customers, and therefore requires appropriate protection and management to ensure business continuity and minimize damage related to integrity, availability and confidentiality failures.
We are also aware of the importance of complying with current personal data protection regulations and their implications for the company and its stakeholders.
For these purposes, ZEO Technology assumes the following commitments:
- Promote ongoing information security and privacy management through training and awareness programs.
- Comply with applicable laws and requirements agreed with customers, including information security and personal data protection requirements.
- Meet requirements and continuously improve the effectiveness of the Information Security Management System.
- Ensure business continuity by developing continuity plans based on recognized methodologies.
- Periodically perform and review risk analysis based on recognized methods to establish security and privacy protection levels.
- Ensure that ZEO Technology personnel work toward defined objectives and in accordance with legal requirements.
Reporting vulnerabilities
If you have identified a vulnerability or security incident involving ZEO Technology products, you can report it to helpdesk@zeotechnology.com. This email address is our official channel for third parties to report vulnerabilities and security incidents.
To help us investigate, we recommend including the following information in your email, where available:
- Affected product: product name, version and component or module. If any of these details are unknown, please say so.
- Description of the finding: a title or summary, technical details, steps to reproduce it and potential impact.
- Exploitation or incident: indicate whether you are aware of the vulnerability being exploited or of an incident having occurred. If so, include known dates, affected systems and available evidence. If you do not know, please say so.
- Supporting documentation: references, links or evidence that help explain and investigate the finding.
- Disclosure: indicate whether the finding has already been shared with other parties or published. If you plan to make it public, include the planned date.
- Contact details for follow-up: if you wish, provide your name and any contact details you would like to share.
You do not need all of these details to report a finding. Send the information you have.