Information Security Management System (ISMS) Policy

Home/Information Security Management System (ISMS) Policy

Dtech Softwares protects the confidentiality, integrity, and availability of information we create, process, or store for our business and our customers. This Information Security Management System (ISMS) Policy sets baseline controls. It is published for transparency and does not by itself constitute ISO certification. Personal data is also governed by the Data Protection Act, 2012 (Act 843) and our Privacy Policy. Last updated: 29 September 2026.

Scope

This policy applies to dtechsoftwares.com, admin systems, customer accounts, source code, licence keys, activation data, and information handled during sales, support, and delivery, including workstations and third-party services used by our staff.

Objectives

  • Prevent unauthorised access to systems and customer data.
  • Protect licence, payment, and personal information in transit and at rest, so far as reasonable for our operations.
  • Detect, contain, and recover from incidents.
  • Maintain backups of critical business systems.
  • Ensure staff and contractors understand their duties.

Access control

  • Individual accounts; shared credentials are avoided.
  • Least privilege for each role.
  • Strong passwords and, where enabled, OTP or other multi-factor authentication for administration.
  • Access revoked when people leave or change roles.

Data protection and development

Passwords are hashed. Payment-card data is handled by certified processors; we do not store full card numbers. The web platform uses measures such as CSRF protection, input validation, and prepared database statements. Licence validation and downloads use signed or tokenised access where applicable. Updates are tested before production release.

Incidents, backup, and third parties

Suspected breaches or major outages are escalated, contained, assessed, and documented. Affected parties are notified when required by law or contract. Critical databases are backed up on a schedule appropriate to recovery needs. Customers remain responsible for backups of data in on-premise or self-hosted deployments. We use reputable hosting, email, SMS, and payment providers and limit sharing to what is necessary.

Related policies

QMS Policy · Cookie Policy · Terms and Conditions

Contact

Report a security concern: info@dtechsoftwares.com · +233 55 484 5758 · Nii Adjei Tsuru Road 160, Madina-Estates, Ghana.