IT Security Policy

Version 1.0 · Effective 6 November 2026

The Company publishes this policy to show how it protects customer data and the Checkslip system, under 3 headings: backups · access control · cyber security.

1. Backups

• Databases: backed up regularly
• Code: kept in Git with its full change history

2. Access control

• Access by role (role-based access control) and only as far as needed (least privilege)
• Access reviewed regularly
• When someone leaves the team, all their access is removed at once · when someone changes role, access is changed to match
• Access is logged: who, when, what, and the result

3. Cyber security

• Protection against access at the network and application level
• HTTPS (TLS) on every connection
• Access to keys and secrets limited to those who need it
• Operating systems, databases, frameworks and libraries updated when an important security patch comes out
• Team training on phishing, passwords and using devices safely

4. PDPA

Collect only the data needed · do not keep slip images · publish the privacy policy openly · keep data secure under this policy

5. Reporting a vulnerability or incident

Email: support@checkslip.com

6. Review

Reviewed at least once a year, or when the law, technology or the organisation changes.

7. Management statement

The Company's management supports this policy and carries it out in full.
บริษัท โฮโลแกรม จำกัด · 6 November 2026