Whistleblowing Policy
Nexova encourages its employees, freelancers, shareholders, suppliers, customers and, more generally, all stakeholders to report, in good faith, any behaviour – acts or omissions – carried out at Nexova or in relations with it, that constitutes a breach (or induces a breach) of applicable laws and regulations, or Nexova’s values, policies or procedures.
The Nexova Whistleblowing Policy sets out the procedure for submitting a whistleblowing report relating to breaches, the guidelines for handling reports and the standards of protection for whistleblowers and other people involved in the investigation. Reports may be submitted anonymously.
Coordinated Vulnerability Disclosure (CVD) Policy
Nexova is committed to maintaining the security of its systems, services and information. This Coordinated Vulnerability Disclosure (CVD) Policy provides a mechanism for security researchers, customers, suppliers, partners, vendors, government cybersecurity bodies and other third parties to responsibly report suspected security vulnerabilities.
The objective is to support the timely identification, analysis, assessment, remediation or mitigation, and coordinated communication of vulnerabilities, thereby reducing cybersecurity risk and supporting compliance with applicable legal, regulatory and contractual requirements.