Information Security Program
Last updated: July 27, 2026
Version: 1.0
Effective Date: July 27, 2026
On this page 9 sections
1. PROGRAM OBJECTIVE
The Saees Information Security Program establishes the governance, controls, procedures, and accountability used to manage security risk across Saees Services.
2. GOVERNANCE
Saees assigns responsibility for security oversight, risk management, privacy coordination, incident response, business continuity, vendor review, and security communications. Responsibilities may be performed by employees or qualified service providers.
3. RISK MANAGEMENT
Saees identifies and evaluates risks relating to confidentiality, integrity, availability, privacy, marketplace integrations, AI Services, suppliers, personnel, and changes to the platform. Treatment decisions are documented according to risk and business impact.
4. CONTROL AREAS
The program includes controls for identity and access management, secure development, change management, vulnerability management, logging, monitoring, backups, encryption, incident response, vendor oversight, data retention, business continuity, and workforce security.
5. REVIEW AND TESTING
Security procedures are reviewed periodically and after material changes or significant incidents. Testing may include access reviews, restore testing, vulnerability assessments, incident exercises, code review, and control validation.
6. SERVICE PROVIDERS
Third-party providers are evaluated according to the services they provide and the sensitivity of data they may process. Contractual, technical, or organizational safeguards are used where appropriate.
7. CUSTOMER ASSURANCE
Enterprise Customers may request reasonable security information through the applicable sales, legal, or security process. Responses remain subject to confidentiality, security, privilege, and third-party restrictions.
8. CONTACT
Security inquiries: security@saees.ai
Saees LLC: 4730 University Wy NE, Seattle, WA 98105
9. RELATED DOCUMENTS
The ISP supports the Security Policy, Enterprise Security Overview, DPA, SLA, Incident Response Policy, and Business Continuity and Disaster Recovery Policy.