Our commitment

Company systems are provided for company work. Reasonable personal use is fine; anything that puts our data, our people or our reputation at risk is not.

Not permitted

• Installing unapproved software or browser extensions on managed devices
• Moving company data into personal accounts or storage
• Sharing accounts or credentials
• Accessing unlawful, discriminatory or harassing material
• Bypassing security controls, including MFA and device management

Monitoring

We monitor systems only to the extent necessary for security, legal compliance and system integrity. Monitoring is proportionate, documented, and never used for casual surveillance of individuals.

Governance and review

This policy is owned by the Head of Technology and approved by the board. It is reviewed at least annually, and sooner if the law, our operations or our risk profile changes.