Agmt26 Ichi Plan, Inc. - Laserfiche WebLink

Browse Search

REV: 02-25-26 LF EXHIBIT H SECURITY POLICY 1. Encryption Standards Ichi encrypts all customer data in transit and at rest using modern, industry-standard protocols: In transit: All communications between users and the Ichi platform occur over TLS 1.3 (HTTPS/WSS/SSL), the most current and secure transport-layer protocol. At rest: All data—including files, documents, images, prompts, responses, metadata, logs, and user information—are encrypted using AES-256 encryption. Storage: User-uploaded files are stored in Amazon Web Services (AWS) S3 with Server- Side Encryption (SSE-S3, AES-256). Files are accessed only through short-lived, pre- signed URLs that require user authentication. Backups: Encrypted using AWS SSE-S3 (AES-256) with all transfers protected by TLS 1.3. No unencrypted physical media are used. 2. Intrusion Detection and Network Security Ichi’s application and infrastructure are hosted on AWS and Render, which provide: Managed firewalls, DDoS protection, and automatic patching of the underlying infrastructure. Cloudflare Firewall and network-level monitoring for inbound and outbound traffic. Comprehensive audit logs for all server, database, and shell access. These are maintained through Render and provide detailed records of data access and operations. 3. Data Protection and Access Controls Ichi applies multiple layers of data and access protection: Tenant Isolation: Each customer operates within a tenant-isolated “walled garden”, ensuring complete logical segregation from other organizations. Access Management: Role-based access control (RBAC) with least-privilege principles. Only authorized personnel (administrators and engineers) can access production systems. Authentication: Integration with Microsoft Single Sign-On (SSO) for all users; Ichi stores no user passwords. Multi-factor authentication (MFA) is required for administrative access. Auditability: Access to production systems, backups, and data is logged and reviewed quarterly. All employees undergo background checks before access is granted. 4. Incident Detection and Response Ichi maintains a formal incident response process that includes containment, evaluation, reporting, and prevention steps. ATTY/AGR.2026.050/ICHI Plan, Inc. (AI enabled Software Solution) (Page 28 of 31)