Confidentiality Policy

Last updated: December 16, 2025

Overview

In the course of providing our cybersecurity services, Vigilbase may receive or have access to confidential information belonging to our clients and partners. This policy outlines our commitment to protecting such information and the obligations that apply to its handling.

Definition of Confidential Information

Confidential information includes, but is not limited to:

• Technical data, system configurations, and security assessments
• Business information, strategies, and operational details
• Client lists, customer data, and vendor relationships
• Financial information and pricing structures
• Proprietary methodologies, processes, and trade secrets
• Any information marked or designated as confidential
• Information that a reasonable person would understand to be confidential

Our Confidentiality Obligations

Vigilbase commits to the following confidentiality obligations:

• Treating all confidential information with the same degree of care we use to protect our own confidential information
• Using confidential information solely for the purpose of providing our agreed-upon services
• Restricting access to confidential information to personnel who have a need to know
• Not disclosing confidential information to third parties without prior written consent
• Implementing appropriate technical and organizational security measures
• Promptly notifying you of any unauthorized access or disclosure

Permitted Disclosures

Confidential information may be disclosed in the following circumstances:

• With your prior written authorization
• To our employees, contractors, or subprocessors who need access to perform services, subject to confidentiality obligations
• When required by law, regulation, or valid legal process, with reasonable advance notice where permitted
• To protect the rights, property, or safety of Vigilbase, our clients, or others

Information We May Share With You

In the course of our engagement, Vigilbase may share confidential information with you, including but not limited to security reports, vulnerability assessments, threat intelligence, proprietary methodologies, and other materials marked as confidential. When we share such information:

• You agree not to disclose, distribute, or share this information with any third party without express written permission from Vigilbase
• The information must be used solely for the purpose for which it was provided
• You must implement reasonable security measures to protect the confidentiality of the information
• Upon our request or when the information is no longer needed for its intended purpose, you agree to promptly destroy or return all copies of the confidential information
• Any existing Non-Disclosure Agreements (NDAs) or Data Protection Agreements (DPAs) between us shall also apply to such shared information

Non-Disclosure Agreements

This policy operates in conjunction with any Non-Disclosure Agreement (NDA) or similar agreement executed between Vigilbase and you. Where an NDA exists, the terms of the NDA shall take precedence in the event of any conflict with this policy. We encourage clients handling particularly sensitive information to enter into a formal NDA.

Data Protection Agreements

For engagements involving personal data, our obligations under applicable data protection laws and any Data Processing Agreement (DPA) shall apply in addition to this policy. Our Privacy Policy provides further details on how we handle personal information.

Duration of Confidentiality

Our confidentiality obligations remain in effect during our engagement and continue indefinitely thereafter, unless the information becomes publicly available through no fault of Vigilbase, is independently developed without use of confidential information, or is rightfully obtained from a third party without restriction.

Return or Destruction of Information

Upon termination of our engagement or upon your request, we will return or securely destroy all confidential information in our possession, except where retention is required by law or for legitimate business purposes such as dispute resolution.

Contact Us

If you have any questions about this Confidentiality Policy or wish to discuss specific confidentiality requirements, please contact us at: