Giant Leap Digital
Purpose
These procedures explain how Giant Leap Digital protects Company and client information while providing services and outline the responsibilities of both parties regarding information security.
Confidentiality
Information shared by either party will be treated as confidential and used only for the agreed services unless disclosure is required by law.
Information security
Giant Leap Digital maintains documented security policies including a Bring Your Own Device (BYOD) Policy, Employee Security Guidelines and Contractor Security Agreement. Relevant staff and contractors are required to acknowledge and follow these requirements.
Handling client information
Client information is stored primarily within Google Workspace using least-privilege access. Restricted sharing is used wherever practical and access is limited to authorised users.
File sharing
Files are normally shared using Google Workspace. Permissions are limited to the minimum necessary and removed when no longer required.
Data protection
Client information will not be uploaded to public AI services without the client’s approval. Devices accessing Company systems must meet the Company’s minimum security standards.
Incident Reporting
If a security incident directly affects client information, Giant Leap Digital will notify the client as soon as reasonably practicable and provide appropriate updates.
Client Responsibilities
Clients should use strong passwords, enable MFA where available, protect their own devices and notify Giant Leap Digital promptly if they suspect unauthorised access to shared information.