Security, Compliance & Data Protection

Enterprise-Grade Governance

Carthago Studio Digital S.L. operates under structured governance aligned with:

• EU GDPR

• International labor standards

• OECD Guidelines

• Enterprise vendor compliance expectations

Information Security

We implement:

• Multi-factor authentication (2FA)

• Role-based access controls

• Secure cloud hosting

• Encryption in transit (TLS/HTTPS)

• Restricted repository access

• Formal onboarding and offboarding procedures

Data Protection

We act as a Data Processor when handling client data and operate under written agreements defining responsibilities.

Ethical Conduct

We maintain zero tolerance for:

• Bribery

• Undisclosed conflicts of interest

• Improper handling of confidential data

Incident Response

In the event of a security incident:

• Immediate containment

• Assessment within 24 hours

• Client notification without undue delay

• Remediation and documentation

For compliance inquiries:
contact@carthagostudio.com