LEGAL

Compliance & Security.

Wibx’s commitment to governance, data protection, information security and regulatory compliance.

Wibx adopts compliance and security practices to ensure operations with integrity, data protection and reliability.

WIBX · Compliance · Security

01

Overview

Wibx adopts compliance and security practices to ensure operations with integrity, data protection and reliability.

02

Governance and compliance

  • Internal conduct, unlawful-act prevention and anti-fraud policies.
  • Continuous training on ethics, LGPD and security.
  • Segregation of duties and approval controls for critical activities.
  • Activity records and traceability for audit.

03

Information security

  • Protected cloud environments with network controls, encryption and monitoring.
  • Role-based access control (RBAC).
  • Encryption of data in transit and, when applicable, at rest.
  • Periodic backups and restoration tests.
  • Secure management of keys and secrets.

04

Privacy and data protection

  • Data processing in compliance with LGPD and applicable rules.
  • Minimum collection necessary to provide services.
  • Anonymization/pseudonymization processes when appropriate.
  • Consent for data that requires authorization.
  • Dedicated channel for data subject rights.

05

Technical controls

  • Secure authentication and audit trails.
  • Malware protection and continuous monitoring.
  • Strong password policy and MFA when applicable.
  • Vulnerability management and patch application.
  • Security for APIs and integrations with partners.

06

Third-party management

Partners and suppliers are evaluated according to security, privacy and compliance requirements, with contractual data-protection clauses.

07

Incidents and continuity

  • Incident response plan with detection, containment and notification.
  • Communication to data subjects and authorities when required by law.
  • Continuity and recovery plans for essential services.

08

Audit and continuous improvement

  • Periodic review of security and compliance controls.
  • Log and evidence records for audits.
  • Action plans to correct deviations and evolve processes.

09

Data subject rights and channels

You may exercise rights of access, correction, anonymization, deletion, portability and information about data sharing through the DPO channel.

Email: encarregadodedados@wibx.io

10

Applicable law and forum

This policy follows Brazilian data-protection law. Elected forum: District Court of São José dos Campos/SP.

  • Version: 2025.
  • Language: English.
  • Application: Wibx website.