Security policy

1. Basic policy

We implement organizational, personnel, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of information handled in our medical equipment purchase, sales, and logistics operations.

2. Scope

This policy applies to all information assets handled through our website, business systems, email, documents, and data media.

3. Organizational structure

We maintain an appropriate governance structure, assign responsibility for information security, and carry out rule-making, audits, training, and incident response.

4. Physical security

• Entry and exit control for offices, warehouses, and similar facilities
• Proper storage and disposal of documents, equipment, and media
• Rules for bringing materials in and out of company premises

5. Technical security

• Access control through accounts, passwords, and related measures
• Protection against malicious software and timely software updates
• Use of encrypted communication such as SSL/TLS
• Backup and recovery procedures

6. Personnel security

We provide security awareness training to employees and contractors and require appropriate handling of information.

7. Contractor management

When outsourcing work that involves information, we require appropriate safeguards by contract and supervise vendors as needed.

8. Incident response

If a security incident such as a leak, unauthorized access, or loss occurs, we will promptly investigate, contain damage, prevent recurrence, and report to authorities when required by law.

9. Compliance and review

We comply with applicable laws and internal rules and review this policy as needed for continuous improvement.

10. Contact

For questions about information security, please contact us at: