Section 15 of these Terms

INFORMATION SECURITY

Terms applicable to the use and contracting of UQBITZ services and digital platforms.

This page reproduces one section of the Terms of Service. The Terms are a single agreement — this split exists to make them easier to read. Read the full Terms

Measures adopted by UQBITZ

UQBITZ adopts appropriate technical and administrative security measures to protect the integrity, confidentiality, authenticity and availability of data and systems under its management, including:

  1. Encryption in data transmission (SSL/TLS);
  1. Control of access to servers and administrative systems;
  1. Infrastructure monitoring and detection of suspicious activities;
  1. Backup routines according to the specifications of each contracted service;
  1. Periodic security updates on systems managed by UQBITZ;
  1. Firewalls, malware protection and DDoS attack mitigation.

Security measures are periodically reviewed and improved, following the evolution of threats and best market practices.

Security Matrix and Shared Responsibility

UQBITZ maintains a Security and Shared Responsibility Matrix to delimit the controls under the responsibility of UQBITZ, CLIENT and the suppliers involved. The distribution varies depending on the Service and covers, among other things, physical and infrastructure security, application configuration, identity and access management, credential protection, system updates, backups, monitoring, incident response and data protection.

The matrix is ​​part of the UQBITZ security program and is accompanied by an internal hardening roadmap, periodically reviewed according to identified risks, audits carried out and the evolution of applicable technologies and threats.

Suppliers are responsible for the controls included in their respective services and contractual scopes. UQBITZ is responsible for the configuration and operation of the components under its management. CLIENT remains responsible for its users, credentials, content, settings under its control, software installed by it and other obligations indicated in these Terms.

CLIENT Responsibilities

The security of the contracted services also depends on appropriate practices on the part of CLIENT, which is committed to:

  1. Use strong and unique passwords, not sharing them with unauthorized third parties;
  1. Keep the software, plugins and themes under your responsibility up to date;
  1. Immediately report to UQBITZ any suspicion of unauthorized access or security breach;
  1. Maintain your own backup copy of your critical data and content;
  1. Use the services in accordance with the Acceptable Use Policy (section 4).

UQBITZ is not responsible for security incidents arising from CLIENT's negligence, including the use of weak passwords, improper sharing of credentials, failure to update software or installation of unauthorized components.

Security incidents

In the event of a security incident that could compromise CLIENT data, UQBITZ:

  1. Will adopt immediate measures to contain and mitigate the effects of the incident;
  1. Will notify the affected CLIENT as soon as possible, informing the nature of the incident, the potentially compromised data and the measures adopted;
  1. Will inform the competent bodies when required by applicable legislation, in particular the Brazilian General Data Protection Law (Law No. 13.709/2018).

Limitations

No security system is infallible. UQBITZ uses its best efforts, but does not guarantee absolute protection against all forms of attack, intrusion or data loss. UQBITZ's liability in the event of security incidents is limited to the provisions of the “Limitation of Liability” section of these Terms.