Founded in 2024

Cold recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.

As a service provider/product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Cold so that our customers can feel confident in choosing us as a trusted provider.

This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

## Resources (40)

Here are the important security policies and documents which are a part of Cold’s compliance program.

### Policies
- **Acceptable Usage Policy**  
  Request access
- **Access Control Policy**  
  Request access
- **Access Control Procedure**  
  Request access
- **Asset Management Policy**  
  Request access
- **Asset Management Procedure**  
  Request access
- **Business Continuity & Disaster Recovery Policy**  
  Request access
- **Business Continuity Plan**  
  Request access
- **Code of Business Conduct Policy**  
  Request access
- **Communications & Network Security Policy**  
  Request access
- **Compliance Policy**  
  Request access
- **Compliance Procedure**  
  Request access
- **Data Breach Notification Policy**  
  Request access
- **Data Classification Policy**  
  Request access
- **Data Protection Policy**  
  Request access
- **Vendor Management Procedure**  
  Request access
- **Data Retention Policy**  
  Request access
- **Encryption Policy**  
  Request access
- **Endpoint Security Policy**  
  Request access
- **HR Security Policy**  
  Request access
- **HR Security Procedure**  
  Request access
- **Incident Management Policy**  
  Request access
- **Incident Management Procedure**  
  Request access
- **Information Security Policy**  
  Request access
- **Media Disposal Policy**  
  Request access
- **Network Security Procedure**  
  Request access
- **Operation Security Policy**  
  Request access
- **Operations Security Procedure**  
  Request access
- **Organization of Information Security Policy**  
  Request access
- **Personal Data Breach Notification Procedure**  
  Request access
- **PHI Data breach Notification Procedure**  
  Request access
- **Physical and Environmental Security Procedure**  
  Request access
- **Physical & Environmental Security Policy**  
  Request access
- **Privacy By Design Policy**  
  Request access
- **Risk Assessment & Management Policy**  
  Request access
- **SDLC Procedure**  
  Request access
- **System Acquisition and Development Lifecycle Policy**  
  Request access
- **Vendor Management Policy**  
  Request access

### Documents
- **System Description**  
  View document
- **Pentest Report**  
  View document
- **Records of processing activities (ROPA) and data flow maps**  
  View document