Information security policy
The German version of this policy is authoritative.
The principles by which production.AI GmbH protects its own information and the information entrusted to it.
Certified to ISO/IEC 27001 for the development, operation and support of our software.
- Alignment
- DIN EN ISO 27001:2024
- Applies to
- Management and all employees
- Improvement
- CIP days at planned intervals
Security, carried by everyone.
production.AI GmbH – pAI for short – exists to develop and establish digital assistance systems in the production environment. With these innovative assistance systems and sector-specific expertise in the manufacturing industry, pAI supports its customers in optimising production processes through digital transformation.
Information security (IS) is a high priority for pAI. A functioning IS management system (ISM) makes an essential contribution to trusting cooperation with interested parties. Only in this way is it possible to offer high-quality, scalable products and services that protect the information entrusted to us by customers as well as our own, and thereby secure the continued business success of pAI.
To fulfil this purpose, pAI relies on an IS policy that is lived from the management to every employee. Each employee, as well as the management, contributes significantly to IS in the company through their daily IS-oriented work and conduct. Our company commits to meeting the applicable requirements, in particular all requirements relating to IS, and to a continual improvement process (CIP) that enables us to provide our customers with products and services of higher quality that are secure with regard to IS.
An essential part of continual improvement are the CIP days held at planned intervals. To this end, a corporate culture in the spirit of the CIP is to be created and ensured through the following principles, which follow the requirements for an ISM system (ISMS) according to DIN EN ISO 27001:2024.
Five principles protect what is entrusted to us.
01 · Foundation
Responsible conduct
The management supports the maintenance of the ISMS. All employees are made aware of IS at regular intervals and are required to report any vulnerabilities and potential for improvement immediately. Measures are defined for vulnerabilities and potential for improvement and, where possible, integrated into the business processes. Documenting all assets and implemented measures also makes responsibilities clear and traceable.
02 · Protection goal
Confidentiality
Data and information that are not publicly accessible are protected against unauthorised access by means of authorisation in all business processes. This applies above all to the data received, generated, processed, stored and destroyed by products or in the course of services provided by pAI.
03 · Protection goal
Integrity
All information is handled in our business processes in such a way that it is available in complete and unaltered form at all times. Our information and IT systems ensure that the sending and receiving of information cannot be denied or disputed by anyone. In addition, only those persons or entities whose identity and legitimate interest have been proven beyond doubt are given access to non-public information.
04 · Protection goal
Availability
The information and IT systems underlying the products and services are operated in such a way that information and functions are always available to the requesting interested parties at the required time.
05 · Outcome
Trusting customer relationships
Continuously maintained ISM according to the principles of confidentiality, integrity and availability contributes to trusting relationships with interested parties. This secures long-term cooperation and thus continued business success.