{"id":1391,"date":"2024-10-16T15:19:45","date_gmt":"2024-10-16T12:19:45","guid":{"rendered":"https:\/\/atao.fi\/?page_id=1391"},"modified":"2025-08-26T13:28:38","modified_gmt":"2025-08-26T10:28:38","slug":"security-and-privacy","status":"publish","type":"page","link":"https:\/\/atao.fi\/en\/security-and-privacy\/","title":{"rendered":"Security and Privacy"},"content":{"rendered":"\n
\n
\n \"\" \"\" <\/div>\n
<\/div>\n \n
\n
\n
\n \n\n

Atao Oy’s Information Security and Privacy<\/h1>\n\n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n
\n
\n
\n\n
\n \"\" \n <\/div>\n
\n
\n \n\n

<\/h2>

Information Security and Privacy policies<\/h2><\/div><\/div><\/div><\/div><\/div><\/section><\/div><\/div><\/div><\/section><\/div><\/h1>\n\n\n\n

<\/p>\n\n\n\n

Download Information Security Policy (Fi)<\/a> <\/p>\n\n\n\n

<\/p>\n\n\n\n

Download Privacy policy (Fi)<\/a><\/p>\n\n\n\n

<\/p>\n\n\n\n

Download ISO\/IEC 27001 Certificate (En)<\/a><\/p>\n\n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n

\n
\n
\n\n
\n \"\" \n <\/div>\n
\n
\n \n\n

<\/h2>

Information Security Management System<\/h2><\/div><\/div><\/div><\/div><\/div><\/section><\/div><\/div><\/div><\/section><\/div><\/h1>\n\n\n\n

Our company’s information security management system is based on internationally recognized frameworks that support the protection of data confidentiality, integrity, and availability. The management system complies with the requirements of\u00a0ISO\/IEC 27001:2022<\/strong>\u00a0and covers the entire organization. The certification confirms that information security is comprehensively addressed across our operations and continuously developed within a structured framework. We conduct regular risk assessments, evaluate the state of our information security, and update our practices to adapt to an ever-evolving threat landscape. Information security is not a separate function \u2014 it is embedded in our daily operations, from governance to technical systems.<\/p>\n\n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n

\n
\n
\n\n
\n \"\" \n <\/div>\n
\n
\n \n\n

<\/h2>

Information Security Management and Continuous Improvement<\/h2><\/div><\/div><\/div><\/div><\/div><\/section><\/div><\/div><\/div><\/section><\/div><\/h1>\n\n\n\n

The leadership plays a central role in managing information security and driving continuous improvement. We are committed to regularly reviewing and updating our information security policies to ensure they meet the organization’s needs and address the evolving threat landscape. We ensure that all employees understand the importance of information security and employ a systematic approach to its development. We conduct regular audits and assessments to identify areas for improvement and enhance our information security practices. Information security is a dynamic and evolving process that adapts to the organization’s growth and the introduction of new technologies.<\/p>\n\n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n

\n
\n
\n\n
\n \"\" \n <\/div>\n
\n
\n \n\n

<\/h2>

Management of Risks, Threats, and Vulnerabilities<\/h2><\/div><\/div><\/div><\/div><\/div><\/section><\/div><\/div><\/div><\/section><\/div><\/h1>\n\n\n\n

Our risk management process is based on international standards and covers all functions of the organization. We regularly identify and assess information security risks to respond as quickly and effectively as possible to threats. This includes both internal and external threats, such as data breaches, hardware failures, and human errors. A key component of our risk management is incident management, which aims to minimize business disruptions and protect data as effectively as possible during incidents. Our measures include both proactive and reactive strategies designed to safeguard customer data and services from potential risks.<\/p>\n\n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n

\n
\n
\n\n
\n \"\" \n <\/div>\n
\n
\n \n\n

Personnel Information Security Expertise<\/strong><\/strong><\/strong><\/strong><\/h1>\n\n\n\n

Staff information security expertise is a central component of our company’s information security strategy. We regularly train our employees on the latest trends, threats, and best practices in information security to ensure they can effectively protect data. Personnel changes are managed in a controlled manner, and access rights are carefully monitored. Each employee is granted access only to the information necessary for their job duties, and access rights are regularly reviewed. We encourage staff to report any security incidents or suspicious activities, allowing us to respond to threats as quickly as possible.<\/p>\n\n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n

\n
\n
\n\n
\n \"\" \n <\/div>\n
\n
\n \n\n

Physical Security<\/h1>\n\n\n\n

Physical security is a critical component of protecting our data centers and services. We use an ISO\/IEC 27001 certified service provider, whose data centers are located in Finland and meet stringent information security requirements, including access control, surveillance cameras, and security protocols to protect hardware and data. Our backups are geographically distributed, enhancing data availability even in exceptional situations.<\/p>\n\n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n

\n
\n
\n\n
\n \"\" \n <\/div>\n
\n
\n \n\n

Technical Security<\/strong><\/strong><\/strong><\/strong><\/h1>\n\n\n\n

Our technical security is designed to cover all business processes and systems. Our infrastructure is protected by firewalls, and our web services are secured with a Web Access Firewall (WAF). In addition, we use an Intrusion Prevention System (IPS), continuous monitoring, and centralized log management, allowing us to detect and respond to threats as quickly as possible while ensuring the integrity and security of our data. We continuously develop our technical security based on risk assessments, adapting protective measures and technologies to meet business needs and evolving threat landscapes.<\/p>\n\n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n

\n
\n
\n\n
\n \"\" \n <\/div>\n
\n
\n \n\n

Service Continuity and Recovery Plan<\/h1>\n\n\n\n

The continuity of our services is ensured through comprehensive backup processes and recovery plans. We regularly test these plans to ensure that data can be restored quickly and efficiently. Our continuity plans address both technical and administrative measures, supporting the uninterrupted continuation of services in case of disruptions. These plans are designed to minimize downtime and ensure a smooth recovery in any situation.<\/p>\n\n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n

\n
\n
\n\n
\n \"\" \n <\/div>\n
\n
\n \n\n

Data Protection and Regulatory Compliance<\/h1>\n\n\n\n

We comply with all data protection regulations, including GDPR, to safeguard the confidentiality and integrity of our customers’ data. Our operations are designed to comply with applicable regulatory requirements, and our processes aim to protect customer data based on risk assessments. Adhering to regulatory requirements is a priority for us, and we ensure that our customers can trust the security of their data processing.<\/p>\n\n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>","protected":false},"excerpt":{"rendered":"","protected":false},"author":8,"featured_media":0,"parent":0,"menu_order":100,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1391","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nSecurity and Privacy - Atao<\/title>\n<meta name=\"robots\" content=\"index, nofollow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/atao.fi\/en\/security-and-privacy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security and Privacy - Atao\" \/>\n<meta property=\"og:url\" content=\"https:\/\/atao.fi\/en\/security-and-privacy\/\" \/>\n<meta property=\"og:site_name\" content=\"Atao\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-26T10:28:38+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/atao.fi\\\/en\\\/security-and-privacy\\\/\",\"url\":\"https:\\\/\\\/atao.fi\\\/en\\\/security-and-privacy\\\/\",\"name\":\"Security and Privacy - Atao\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/atao.fi\\\/en\\\/#website\"},\"datePublished\":\"2024-10-16T12:19:45+00:00\",\"dateModified\":\"2025-08-26T10:28:38+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/atao.fi\\\/en\\\/security-and-privacy\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/atao.fi\\\/en\\\/security-and-privacy\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/atao.fi\\\/en\\\/security-and-privacy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/atao.fi\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security and Privacy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/atao.fi\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/atao.fi\\\/en\\\/\",\"name\":\"Atao\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/atao.fi\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/atao.fi\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/atao.fi\\\/en\\\/#organization\",\"name\":\"Atao\",\"url\":\"https:\\\/\\\/atao.fi\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/atao.fi\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/atao.fi\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/umbrella-interactive-logo-yo-rgb.png\",\"contentUrl\":\"https:\\\/\\\/atao.fi\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/umbrella-interactive-logo-yo-rgb.png\",\"width\":1029,\"height\":245,\"caption\":\"Atao\"},\"image\":{\"@id\":\"https:\\\/\\\/atao.fi\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security and Privacy - Atao","robots":{"index":"index","follow":"nofollow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/atao.fi\/en\/security-and-privacy\/","og_locale":"en_US","og_type":"article","og_title":"Security and Privacy - Atao","og_url":"https:\/\/atao.fi\/en\/security-and-privacy\/","og_site_name":"Atao","article_modified_time":"2025-08-26T10:28:38+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/atao.fi\/en\/security-and-privacy\/","url":"https:\/\/atao.fi\/en\/security-and-privacy\/","name":"Security and Privacy - Atao","isPartOf":{"@id":"https:\/\/atao.fi\/en\/#website"},"datePublished":"2024-10-16T12:19:45+00:00","dateModified":"2025-08-26T10:28:38+00:00","breadcrumb":{"@id":"https:\/\/atao.fi\/en\/security-and-privacy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/atao.fi\/en\/security-and-privacy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/atao.fi\/en\/security-and-privacy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/atao.fi\/en\/"},{"@type":"ListItem","position":2,"name":"Security and Privacy"}]},{"@type":"WebSite","@id":"https:\/\/atao.fi\/en\/#website","url":"https:\/\/atao.fi\/en\/","name":"Atao","description":"","publisher":{"@id":"https:\/\/atao.fi\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/atao.fi\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/atao.fi\/en\/#organization","name":"Atao","url":"https:\/\/atao.fi\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atao.fi\/en\/#\/schema\/logo\/image\/","url":"https:\/\/atao.fi\/wp-content\/uploads\/2026\/05\/umbrella-interactive-logo-yo-rgb.png","contentUrl":"https:\/\/atao.fi\/wp-content\/uploads\/2026\/05\/umbrella-interactive-logo-yo-rgb.png","width":1029,"height":245,"caption":"Atao"},"image":{"@id":"https:\/\/atao.fi\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/atao.fi\/en\/wp-json\/wp\/v2\/pages\/1391","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/atao.fi\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/atao.fi\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/atao.fi\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/atao.fi\/en\/wp-json\/wp\/v2\/comments?post=1391"}],"version-history":[{"count":15,"href":"https:\/\/atao.fi\/en\/wp-json\/wp\/v2\/pages\/1391\/revisions"}],"predecessor-version":[{"id":1770,"href":"https:\/\/atao.fi\/en\/wp-json\/wp\/v2\/pages\/1391\/revisions\/1770"}],"wp:attachment":[{"href":"https:\/\/atao.fi\/en\/wp-json\/wp\/v2\/media?parent=1391"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}