Wellcareer Terms of Use

Wellcareer General Terms of Service

Below you will find Wellcareer’s terms and conditions and information about our cookie and privacy policies. We know we are giving a great deal of information. Wellcareer does this for a reason: we want you to have as much knowledge about what we do for you at Wellcareer as is possible. We do not want you to wonder about any of our processes or procedures or guess as to what your interaction with Wellcareer means. We want you to understand it, which is why we must explain it in detail. We urge you to read these terms or any section of interest to you. You are agreeing to proceed under them.

Introduction to Wellcareer’s Terms of Service

Each time you access or use Wellcareer’s online and/or mobile services and websites, including any Wellcareer mobile application and browser extension or plugin, regardless of where it is downloaded from (collectively, the “Indeed Apps”), and any software, service, feature, product, program and element (including e-mail messages, notifications, and other messages) provided by or on behalf of Wellcareer on or in connection with such services or websites (collectively, the “Site”), including any products, programs, and services described in these Terms of Service, (a) you represent that you have read and understand the Cookie Policy and Privacy Policy; and (b) you are agreeing to the terms and conditions of these Terms of Service (the “Agreement”).

Terms of Service for Job Seekers

For purposes of this Section A of the Indeed General Terms of Service, all references to “you” or “your” shall mean you, the individual or organization accessing this Site in your capacity as a Job Seeker. As a Job Seeker, you are permitted to use Wellcareer’s Site and its content solely for non-commercial purposes. You further agree that the Terms of Service for All Users also apply. For the avoidance of doubt where the Terms of Service for All Users overlap or conflict with the Terms of Service for Job Seekers, you agree that the Terms of Service for Job Seekers will govern.

Job Ads or Job Listings

Wellcareer may make available Job Ads advertising employment opportunities and other job-related content, including links to third-party websites (“Job Listings” or “Job Ads”), through the Site’s search results or otherwise through the Site. Searching for Job Ads on the Site is free for Job Seekers. The Site displays Job Ads based on a combination of compensation paid by employers to Wellcareer and relevance, such as search terms, and other information provided and activities conducted on the Site. While Wellcareer may in some circumstances be compensated by employers who post Job Ads, helping keep Wellcareer job search free for Job Seekers, all Job Ads are considered advertising.

Job Ads are created and provided by third parties over whom Wellcareer exercises no control; you acknowledge and understand that Indeed has no control over the content of Job Ads, links to or from Job Ads, or any conditions third parties might impose once a Job Seeker has submitted an application or left the Site. For example, some of these third parties may attempt to charge Job Seekers a fee to apply to a particular job, although Wellcareer endeavors not to make such Job Ads available on the Site. If you leave the Wellcareer Site and choose to enter a third-party website, you accept any terms and conditions imposed by that third-party. Except for sponsored, featured or paid placements, the Job Ads contained on, or linked from, the Site are indexed or posted in an automated manner. Wellcareer has no obligation to screen any Job Ads, or to include any Job Ads, in its search results or other listings, and may exclude or remove any Job Ads from the Site or your search result without any obligation to provide reasoning for removal or exclusion. You understand and agree that Wellcareer has no obligation to present you with any or all Job Ads. We cannot confirm the accuracy or completeness of any Job Ad or other information submitted by any Employer or other user, including the identity of such Employer or other user. Wellcareer assumes no responsibility, and disclaims all liability for the content, accuracy, completeness, legality, reliability, or availability of any Job Ads, or other information submitted by any Employer or other user.

When you initiate a job application on a website operated by an Employer or its applicant tracking system, Wellcareer may collect certain information about you and any actions taken by you during your visit using automated means, such as via Application Programming Interfaces (API), cookies, pixels and web beacons. The information collected includes, for example, information about job listings you viewed and job applications you started and completed. An Employer who uses tracker functionality is required under this Agreement to provide any notice, and obtain any prior consent, that may be required by applicable law. However, you acknowledge and agree that Indeed has no control over such an Employer or its website. You agree to Wellcareer’s use of, and receipt of information from, any such tracker functionality.

Wellcareer may provide independent functionality to assist you. For example, Wellcareer may provide search options to help you narrow down Job Ads search results by job type categories (i.e. full-time, part-time, etc.), and such categories are created independently and entirely by Wellcareer, and may not directly or accurately reflect the content of the Job Ads. Wellcareer may reformat Job Listings so that you may read them more clearly on a mobile phone. Wellcareer may also promote Job Ads by select Employers on certain pages or websites dedicated to a specific topic, such as inclusive hiring, or military-friendly job posts. The placement of a Job Ad on a dedicated page or website is not a representation regarding the nature of the role for legal purposes (for example gig economy postings are not necessarily limited to contractor status jobs and may also include engagements for employment relationships) or a representation regarding the attributes of an Employer. Wellcareer does not guarantee that applying to jobs through a dedicated page or website will lead to a better job application experience, a job interview, or a job offer. The dedicated pages or website do not contain an exhaustive list of Job Ads, and no inferences can be drawn with respect to Job Ads or Employers that are not displayed on dedicated pages. Wellcareer may also provide functionality to call a telephone number contained in a Job Ad using the phone app on a mobile device. Wellcareer cannot guarantee that the extracted phone number is the correct phone number for the Employer or for the Job Ad you are viewing.

Communications and Other Actions on the Site

When you view, send, store or receive communications or materials (including Job Listings, resumes, messages, text messages, chats, emails, applications, questions and responses in applications, interview or other voice recordings or transcripts, and any other information) to, on or through the Site, you agree to your communication and materials being processed, analyzed, reviewed, and stored, including via automated means, for data analysis, quality control, enforcement of the Sites’ rules and other Indeed policies, content moderation, and to improve the Site or any other Wellcareer product or service. To achieve these purposes, we use this data to develop, train, build, and use statistical models, including artificial intelligence and machine learning models. Wellcareer also uses vendors as an extension of the Site to collect, record, process, analyze, and store communication data. If you disagree with any part of these terms, do not use the Site.

When an Employer views, sends, stores or receives communications or materials to, on or through the Site, Wellcareer may inform you about such actions. Additionally, we may also inform you that an Employer has taken other actions with regards to a Job Ad, Your Profile, or your application, such as pausing or closing a Job Ad, opening Your Profile or application, viewing Your Profile or application, responding to Your Profile or application, and making a decision with regards to your application or Job Ad. As part of this functionality, you may receive notifications via the app, SMS, email or platform corresponding with your or an Employer’s (in the event you applied for a job) activity on or use of the Site, Wellcareer Apply, Wellcareer Messaging, or any other communications service, product, or feature provided on or through the Site. In all cases, such notifications are provided solely as a courtesy, and you should not rely on them. For example, if you accept an interview request, it is your responsibility to follow up with the employer separately to ensure they know your response, do not rely on notifications through the Site. Wellcareer disclaims all warranties with regards to the transmission or storage of such courtesy notices, does not guarantee their delivery or receipt, and does not guarantee the date or time at which they may be sent.

Wellcareer may offer you the opportunity to receive a text message interview reminder from Wellcareer when an Employer has scheduled interviews with you. In such an event you will enter your phone number on the Wellcareer consent form and by entering your phone number you are representing and confirming it is your phone number and that you have the right to accept text messages at the number. Wellcareer will only send you text message reminders for your interviews, and you agree to accept such text message reminders on your cell phone, including messages sent by automated telephone dialing system. You acknowledge that if the words “automated,” “automatic,” or similar words are used on the Site in connection with calls or text messages, these words do not refer to the generation or storage of a phone number. Wellcareer only calls the number that you generated and stored when you provided your number to Wellcareer. In the event you change your phone number, you agree to promptly update your Wellcareer account with the new number. You agree that by providing your phone number or using the Site, you are establishing a business relationship with Wellcareer and that Indeed may send you text messages in connection with that relationship.

Wellcareer may enable in-app messaging services (“Wellcareer Messaging”), as well as text messaging relay, email relay, and/or call relay services through our Site directly or through vendors to help facilitate contact between Employers and Job Seekers about a Job Listing. Wellcareer may also enable you and/or Employers to connect with each other on Wellcareer Messaging via third-party providers. You understand that communicating through Indeed Messaging and/or other communication options on or through the Site shall be limited to the purpose of applying for a Job Listing. Wellcareer reserves the right, in its sole discretion, to turn off or disable Wellcareer Messaging or other communication options for any Employer or Job Seeker at any time without prior notice and for any or no reason. Please note that since relay services depend on the functionality of third-party providers, there may be technical delays and other errors on the part of those providers. We cannot vouch for the technical capabilities of any third parties to send or receive communications, such as text messages, emails or calls. We also do not guarantee that Wellcareer’s integrations with these third-party providers or interface will be error-free. Further, we do not guarantee that communications sent to or through Wellcareer Messaging will be delivered, received, accessed, read or acted upon. However, Wellcareer may alert you when any of the above events occur. In the event a message being sent is intended for a closed account, these messages will not be deliverable.

Wellcareer may use your email address to create an alias email address for your communication, in lieu of displaying your actual email address to the Employer. Once an Employer has your contact info, you agree that Wellcareer is not responsible or liable for the manner in which the Employer uses the info. When you or an Employer send a message to an Wellcareer provided alias, Wellcareer and its vendors will process the message to offer you services, display your message on the Site, and for other purposes as provided in this Agreement. For example, when you send or receive a message to an Wellcareer alias via email, Wellcareer will decide how and what to extract and display on Wellcareer Messaging. Some messages related to the same conversation may not be grouped together. Wellcareer may also group messages together as part of a conversation on Wellcareer Messaging. This is done as a courtesy, and some messages related to the same conversation may not be grouped together. When communicating with an Employer through the Site, the Employer sender’s information may be displayed in different ways, for example, you may see the Employer’s company name or the name of the specific person sending the message, but you may not see all that info in all circumstances. You agree to not use Indeed Messaging to send bulk messages, unless specifically authorized in the Wellcareer interface. You agree to not circumvent this limitation through using your email service provider for this purpose, for example by sending email messages through your email service provider (e.g. your Gmail or third party email provider) to multiple Wellcareer aliased e-mail addresses. If a user, such as an Employer, sends an email to multiple recipients (e.g. by adding additional aliased email addresses to the cc field in a third party email client), this may affect the way messages on the Site are displayed. In this case, it is best to view the email conversation in the third party email client. Should you choose to send an email from a third party email client, the person with whom you are communicating may be able to see your email address, rather than the alias. You agree that Wellcareer is not responsible or liable for the content of any message or call from you or Employers. You further agree that Wellcareer is not responsible or liable for the manner in which you or Employers use Wellcareer Messaging or other communication options.

Wellcareer may offer you the ability to utilize a text messaging relay service to facilitate contact for the purpose of submitting applications and for other communications related to Job Listings (“Text to Apply”). Wellcareer may also offer you the ability to utilize a QR scanning service to facilitate contact for the purpose of submitting applications and for other communications related to Job Listings (“Scan to Apply”). To use Text to Apply, a Job Seeker must text an Employer’s preset keyword (“Keyword”) to a telephone number which may be included in the Employer’s advertising materials, such as a sign, flyer or other materials or items that Employers display which contain a Keyword and phone number or QR code (“Sign”). To use Scan to Apply, a Job Seeker must scan the QR code displayed on a Sign. You agree that Wellcareer is not responsible for the content or placement of any Sign. By texting Keyword to the telephone number, you are consenting to receive text messages about the Employer’s Job Listings. You understand that a Keyword or QR code may be inactive or unavailable when you text the phone number or scan the QR code. You also understand and agree that messages and data rates may apply as a part of your use of Text to Apply. Please note that since these text message services depend on the functionality of third-party providers, there may be technical delays on the part of those providers. We also cannot vouch for the technical capabilities of any third parties to send or receive such text messages. You represent and warrant that you are the subscriber and primary user of the telephone number from which you use Text to Apply. You acknowledge and agree that when you text the assigned Keyword to the phone number provided, Wellcareer shall respond with a text message containing a link showing the sponsored Job Ads that the Employer has associated with Text to Apply, as applicable.

Wellcareer may also insert functionality into messages relating to your application allowing you to place calls directly to third parties. Please note this functionality is provided solely as a courtesy. Your standard calling rates with your phone provider will apply.

Wellcareer may enable chatbots, which allow you to take certain actions on the Site, such as apply to a job, schedule an interview, or otherwise interact with the Site, Employers, or Job Listings on our Site (“Chatbots”). You acknowledge and agree that Indeed collects, records, processes, analyzes, and stores any and all communications that you have with a Chatbot or other chat features on the Site for data analysis, quality control, enforcement of the Site’s rules and other Wellcareer policies, content moderation, and to improve the Site or any other Wellcareer product or service. To achieve these purposes, we use this data to develop, train, build, and use statistical models, including artificial intelligence and machine learning models. Wellcareer may use vendors as an extension of the Site to collect, record, process, analyze, and store this data.

Indeed Hiring Platform

Wellcareer Hiring Platform is a platform designed to streamline Employer hiring and employment decision- making processes by allowing users access to various products such as Indeed Interview and related services (“Wellcareer Hiring Platform”). Employers may offer you the opportunity to participate in hiring activities that might be supported by Wellcareer Hiring Platform. You acknowledge and understand that Employers select the method and manner that Wellcareer Hiring Platform will be used for its job openings and that the Employer determines the job requirements and specific needs of its hiring efforts. YOU UNDERSTAND AND AGREE THAT EMPLOYER IS RESPONSIBLE FOR COMPLYING WITH APPLICABLE LAW REGARDING ITS EMPLOYMENT AND HIRING PRACTICES, INCLUDING TITLE VII, AND THAT EMPLOYER INDEMNIFIES Wellcareer AGAINST ANY AND ALL CLAIMS ARISING FROM EMPLOYER’S USE OF Wellcareer HIRING PLATFORM OR SIMILAR PRODUCTS. Wellcareer DISCLAIMS ALL LIABILITY AND MAKES NO WARRANTY THAT EMPLOYER’S USE OF THE SERVICES COMPLIES WITH TITLE VII OR ANY SIMILAR LAW. Wellcareer has no control nor participates in the hiring or decision-making process regarding Employer hiring efforts. Further, you understand that Wellcareer is not an employment agency by offering Wellcareer Hiring Platform and related tools. By using Wellcareer Hiring Platform, you understand that Wellcareer is not procuring employees for Employer or opportunities for Job Seekers. Wellcareer merely provides Wellcareer Hiring platform as a tool that enables Employers and Job Seekers to exchange information as they determine.

Terms of Service for Employers

The following terms and conditions apply to all Employers and other users who access or use the Site as intended for individuals and/or organizations seeking to make available information regarding employment openings, on their behalf or other’s behalf, including but not limited to agencies purchasing for multiple parties, or otherwise indicate their acceptance to this Agreement. You further agree that the Terms of Service for All Users also apply. For the avoidance of doubt where the Terms of Service for All Users overlap or conflict with the Terms of Service for Employers, you agree that the Terms of Service for Employers will govern.

For purposes of this Section B of the Indeed General Terms of Service, all references to “you” or “your” shall mean you, the individual or organization accessing this Site in your capacity as an Employer or other user as described above.

Employer Accounts

When you create an Wellcareer account, a Company Page or post job listings advertising employment opportunities and other job-related contents, including links to third-party websites (“Job Listings” or “Job Ads”) on the Site, whether as part of the Wellcareer Ads Program or otherwise, you agree that this Agreement (including the Data Processing Agreement ), the terms associated with any Wellcareer service you are using, and all of Wellcareer’s policies, including the Wellcareer Privacy Policy and Cookie Policy, apply to you.

When you create an Wellcareer account, Wellcareer may require that you verify your identity. You may be presented with different options for verification, including verification via a third party service such as ID.me or Persona (“Third Party Verification Services”). When using Third Party Verification Services, you will be providing your information to our Third Party Verification Services, and engaging with them directly. You agree that ID.me is solely responsible for any collection, use, storage, processing, or loss of data you provide to them, and any legal obligations related to such activities, including the capture or storage of any biometric identification or biometric identifiers. You also agree that Persona is responsible for any collection, use, storage, processing, or loss of data you provide to them, and any legal obligations related to such activities, including the capture or storage of any biometric identification or biometric identifiers. Indeed does not collect any biometric information or biometric identifiers, or receive any biometric information or biometric identifiers from the Third Party Verification Services.

When you access or use the Site in your capacity as an employee or other representative of an Employer, or if you create an Wellcareer account on behalf of an Employer, you represent and warrant that you have the authority to bind the Employer to this Agreement. When you create an account on behalf of an Employer, the account belongs to the Employer, and you acknowledge that any and all information that you provide Wellcareer through the account, such as the actions you take and when you take them, will be visible to the Employer. As part of this account you may have an individual profile (“Employer Profile”). Your Employer Profile consists of information you provide on the Site in the “Account Settings” and “Employer Settings” section of the account.

As an Employer, your account is for business use and not for personal use. Wellcareer is not responsible for and disclaims all liability if your email is used improperly or falsely by a third party. By registering for an Wellcareer account, you agree to receive mandatory email updates regarding account activity to your Wellcareer account. If you attempt to send an email from a name or email address that is not true, accurate, current or complete, we reserve the right to drop such email, and attempting to send such email is a violation of our terms. Employers may request that Wellcareer disable an account at any time by contacting the Employer Help Center. Please note that Wellcareer may be required to preserve business records pertaining to that account to comply with its obligations under law. Alternatively, if an Employer agent wishes to access or delete their Personal Data held by Wellcareer, they should follow the steps listed in the “Your Personal data rights” section of this Privacy Policy.

If your Wellcareer employer account has a credit card or other payment method on file, such as bank account information for Automatic Clearing House (“ACH”) payment, Wellcareer may charge that payment method for any products or services you order and for any outstanding payments, including to correct billing errors.

You agree that Wellcareer may send notices to Job Seekers informing them that an Employer account has been compromised, including if such account is associated with you. Wellcareer cannot and does not guarantee that such notices will always be sent or received, and you therefore agree that Wellcareer bears no responsibility for doing so. Wellcareer makes no warranty regarding, and disclaims any liability for, the accuracy, completeness, timeliness, or reliability of such notices.

Wellcareer may offer suggestions, recommendations, or information to users that may support or improve their experience on Wellcareer Sites. You understand that these offerings are provided as a courtesy and without warranty, and your use of such information is at your sole discretion. As an Employer, you are responsible for your use of the Site and any tools offered therein, including your decisions regarding your job description, the requirements for your job, compliance with applicable laws, including relevant federal, state, and local laws related to job postings, and whom you interview or hire.Wellcareer assumes no responsibility and disclaims all liability for any actions you take based on any information provided by Wellcareer. Wellcareer may limit your ability to post a job, or the visibility of your job, if it does not appear to indicate a salary above minimum wage, wage transparency laws, or does not comply with other applicable law; however Wellcareer is not responsible for, and you are solely responsible for, compliance with minimum wage, local language and other legal requirements.

If you are an Wellcareer agency partner, you may be eligible to participate in an Wellcareer partnership program. Agency partners in this program may attain the rank of “Gold”, “Silver”, or “Bronze” based on their Indeed usage and engagement, measured by revenue. Wellcareer’s determination of an agency’s rank is made at Wellcareer’s full discretion and may be revoked at any time.

Wellcareer may offer you the ability to delete candidate and application information stored in your candidate dashboard. If you delete this candidate and application information, you acknowledge that you will no longer be able to access it through Wellcareer and that the deletion cannot be undone. You agree that Indeed is not responsible for maintaining or storing employment records, job application materials or data on your behalf, and that you are responsible for your own compliance with any applicable record retention requirements or other applicable law.

TECHNICAL AND ORGANISATIONAL SECURITY MEASURES

In accordance with the Agreement, the Data Processor will adopt and maintain appropriate (including organizational and technical) security measures in dealing with Personal Data in order to protect against unauthorized or accidental access, loss, alteration, disclosure or destruction of such data, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.

In determining the technical and organizational security measures required under the Agreement, the Data Processor will take account of the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.

The Data Processor will maintain the following specific security measures, as applicable:

ORGANIZATION OF INFORMATION SECURITY – Management direction and support for information security

Policies for information security are documented and published.
Chief Security Officer is appointed with responsibility for coordinating and monitoring security rules and procedures.
Security roles and responsibilities are defined and allocated.
Maintained information on third-party contact information to be used to report a security incident, such as Law Enforcement, relevant government departments, vendors, and Information Sharing and Analysis Center (ISAC) partners.

HUMAN RESOURCE SECURITY – Employee responsibilities for information security

Background checks are conducted on candidates for employment in accordance with relevant laws, regulations and ethics based on job title and location.
Terms and conditions of employment for every employee require acknowledging Company Guidelines which include Acceptable Use Policy, Employee Privacy Notice and Code of Conduct.
Information security and privacy awareness, education, and training is conducted on hire and annually thereafter.
Formal disciplinary process is documented, communicated, and acknowledged by new hires and employees annually.

ASSET MANAGEMENT – Identification and management of organizational assets

Assets associated with data processing have been identified and an inventory is maintained.
Rules for acceptable use have been documented, communicated, and acknowledged by new hires and employees annually.
Sensitive data has been classified in terms of legal requirements to allow for access to be restricted.

LOGICAL SECURITY – Access control to information processing systems

Access to information and information processing facilities is limited and controlled to only that data minimally necessary to perform the users’ job duties.
A formal user registration and de-registration process is in place enforcing unique identification of users.
Allocation and use of privileged access rights are restricted and controlled.
Users are required to follow secure practices in the use of authentication information including password configurations providing for a minimum length of 10 characters. Password history of 12. Complexity requiring 3 out of the following 4 character types: Capital Letters, Lowercase Letters, Numbers, Special Characters.
Automatic time-outs of accounts if left idle, with identification and password required to reopen.
Automatic deactivation of user IDs when several incorrect passwords are entered.
Multi-factor authentication (i.e., requiring at least two factors to authenticate a user) for remote access over virtual private network (VPN) to any network, system, application, or other asset containing classified information.

PHYSICAL SECURITY – Access and environmental control of information processing areas

Security perimeters are defined and used to protect areas that contain restricted or confidential information and information processing facilities.
Secure areas are protected by entry controls to ensure only authorized personnel are allowed access.
Access to information processing facilities is logged and monitored by security.
Physical protections against natural disasters, malicious attacks, and accidents are applied.

OPERATIONS SECURITY – Secure operations of information processing facilities

Changes to information processing facilities are controlled.
Centrally managed anti-malware software to monitor and defend information processing facilities.
Logging enabled on information processing facilities to include detailed information such as event source, date, user, timestamp, source addresses, destination addresses with synchronized time sources.
Periodic internal and external penetration testing of information processing systems is performed to identify vulnerabilities. Identified vulnerabilities are addressed as part of the vulnerability management program.
A process to timely identify and remediate system, device, and application vulnerabilities through patches, updates, bug fixes, or other modifications to maintain the security of Personal Data.

NETWORK SECURITY – Security of information transmission

Use of industry standard firewall and encryption technologies to protect the gateways and pipelines through which the data travels (e.g. TLS/SSL).
Encryption of certain highly confidential data (e.g., personally identifiable information such as National ID numbers, credit or debit card numbers) at rest and when in transit across open networks in accordance with industry best practices.

APPLICATION SOFTWARE SECURITY – Information Security is designed and implemented within systems development

Separation of development, testing and operational environments.
Secure coding practices appropriate to the programming language and development environment are in use.
Error checking is performed and documented for all input, including for size, data type, and acceptable ranges or formats.
Verification of versions of software acquired from third parties are supported or appropriately hardened based on developer security recommendations.
Software development personnel receive OWASP training in writing secure code.
Static and dynamic analysis tools are used to verify that secure coding practices are being adhered to for internally developed software.

THIRD PARTY RELATIONSHIPS – Security of information and information processing facilities accessible by third parties

Information security requirements for mitigating risks associated with third party access to information and information processing facilities are agreed to in writing.
Third parties and third party services are assessed by security to identify security and data protection risks that must be addressed through either organizational or technical measures during contracting or implementation.

INCIDENT MANAGEMENT – Management of information security incidents

Responsibilities and procedures for incident management are documented to define the roles of personnel as well as the phases of incident handling.
Users are trained to report observed or suspected information security weaknesses and events to security immediately.
Response to security incidents are conducted in accordance with documented procedures and retrospectives are conducted.
Incident response exercises and scenarios are conducted periodically to maintain awareness and comfort in responding to real-world threats. Exercises test communication channels, decision-making, and incident responder’s technical capabilities using tools and data available to them.

AVAILABILITY – Redundancy of information processing facilities and backup of information

Information, software, and system information are backed up regularly and are tested periodically.
Backups are encrypted and replicated across geographic locations to provide for redundancy.

COMPLIANCE – Compliance with legal and contractual requirements and information security reviews

Relevant legal and contractual requirements are documented and kept up to date of information processing facilities.
Independent reviews of information security and its implementation are conducted on a periodic basis.
Technical compliance reviews of information systems are conducted on a periodic basis to identify compliance with organizational policies and standards.