Quality and Information Security Policy
How we commit to quality management and information security across everything we deliver.
Mission
To develop innovative, secure and high-quality software solutions that help our clients improve business performance, while maintaining the highest standards of quality, customer satisfaction and continual improvement.
Vision
To be a trusted software development partner, recognized for technical excellence, customer-focused solutions, innovation, and a demonstrable commitment to quality management and information security.
Our values
- Customer focus
- Quality excellence
- Innovation
- Integrity
- Professionalism
- Collaboration
- Accountability
- Respect for people
Scope
The integrated management system covers the provision of software development and IT consulting services, including web and mobile application development, software architecture, system integration, and ongoing software maintenance and support.
It applies to all employees, contractors and third parties acting on our behalf, and to all information, systems and infrastructure used to deliver these services, including customer information and customer infrastructure accessed during delivery.
Our commitment to quality (ISO 9001:2015)
CodeVivo Solutions is committed to:
- Delivering software and services that meet agreed customer, statutory, regulatory and contractual requirements.
- Understanding our customers' needs, communicating openly at every stage of a project, and acting on the feedback we receive.
- Delivering to agreed timelines and quality standards through planned design, development, verification and release control.
- Identifying and managing the risks and opportunities that affect product quality and customer satisfaction.
- Providing our people with the resources, training and support they need to do their work well.
- Continually improving our processes, our services and the effectiveness of the management system.
Our commitment to information security (ISO/IEC 27001:2022)
CodeVivo Solutions is committed to:
- Protecting the confidentiality, integrity and availability of our own information and the information entrusted to us by our customers.
- Granting access on a least-privilege, need-to-know basis, protected by multi-factor authentication and reviewed regularly.
- Managing information security risks through a structured, documented risk assessment and risk treatment process.
- Building security into our development lifecycle and into every engagement with customer systems and infrastructure.
- Meeting applicable legal, regulatory and contractual requirements, including applicable data protection legislation.
- Detecting, reporting and responding to information security incidents promptly, and notifying affected customers without undue delay.
- Maintaining security awareness and competence across all personnel and contractors.