Compliance
Version effective from January 2022
Regulatory framework
Eliama & Otileo BV designs, builds, and deploys software and AI systems in accordance with applicable legal and regulatory frameworks, including the General Data Protection Regulation (GDPR), the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, and sector-specific regulations where relevant.
Standards and certifications
We maintain and continuously improve technical and organizational security measures aligned with industry-recognized standards such as ISO/IEC 27001 and SOC 2. We work with clients to meet sector-specific requirements, including HIPAA, GDPR, and financial services regulations, as part of each engagement.
Technical and organizational measures
Our measures include role-based access controls, encryption in transit and at rest, network segmentation through private VPCs, secure software development practices, regular vulnerability assessments, logging and monitoring, backup and disaster-recovery procedures, and staff training on security and privacy.
Data processing agreements
Where we process personal data on behalf of clients, we enter into a Data Processing Agreement (DPA) that defines each party’s responsibilities, the nature and purpose of processing, the types of data involved, and the security measures required. Subprocessors are subject to equivalent contractual obligations.
Incident response
We maintain an incident response procedure to detect, assess, and respond to security incidents in a timely manner. Where required by law or contract, we notify affected clients without undue delay and cooperate with supervisory authorities.
Audits and due diligence
Clients may request information about our security and compliance measures as part of a due-diligence process. Detailed audit rights are governed by the applicable agreement and any associated non-disclosure obligations.
Contact
For compliance questions, please contact us at contact@eliama.agency or write to Eliama & Otileo BV, Zavelstraat 84, 3010 Kessel-Lo, Belgium.