Elemwave

Integrated policy

Elemwave is part of the AIRCURY group. The AIRCURY group is a business group dedicated to the design, development, implementation, operation and maintenance of software solutions and digital services, supported by cloud infrastructure and a working model that is predominantly remote, providing services to clients in Spain and abroad.

The management of the AIRCURY group recognises that the quality of its services, protection of the environment, effective management of information technology services and information security are strategic elements for sustainability, client trust, regulatory compliance and business continuity.

To that end, AIRCURY establishes and maintains an Integrated Management System in accordance with the ISO 9001, ISO 14001, ISO/IEC 20000-1 and ISO/IEC 27001 standards and the requirements of Spain's National Security Framework (Esquema Nacional de Seguridad, Royal Decree 311/2022), and commits to its implementation, maintenance and continual improvement.

Management

The management of the AIRCURY group commits to:

  • Providing the resources required for the Integrated Management System to operate properly.
  • Ensuring leadership, accountability and engagement at every level of the organisation.
  • Integrating the principles of quality, the environment, service management and information security into the strategy and business processes.
  • Fostering a culture of prevention, focused on continual improvement, risk management and operational excellence.

Quality

With regard to quality, AIRCURY commits to:

  • Providing services and software solutions that meet client requirements and applicable legal and contractual requirements.
  • Ensuring the planning, control and improvement of the processes that support service delivery.
  • Measuring and analysing process performance and client satisfaction as the basis for continual improvement.
  • Managing the risks and opportunities that may affect the quality of the services provided.

Environment

AIRCURY accepts its responsibility for protecting the environment and commits to:

  • Complying with applicable environmental legislation and other requirements to which the organisation subscribes.
  • Preventing pollution and minimising the environmental impact of its activity, particularly that associated with the use of technological and energy resources.
  • Promoting the efficient use of resources, reduced consumption and the proper management of waste.
  • Integrating environmental considerations into decision-making and the continual improvement of the management system.

IT services

With regard to IT services, AIRCURY commits to:

  • Planning, designing, delivering, operating and improving information technology services in a controlled manner, consistent with the needs of the business and its clients.
  • Defining and maintaining service level agreements, support processes and mechanisms for monitoring performance.
  • Properly managing service incidents, problems, changes and continuity.
  • Ensuring that IT service management is aligned with the organisation's strategic objectives.

Information security

AIRCURY recognises that information and the systems that support it are critical assets, and commits to:

  • Protecting the confidentiality, integrity, availability, authenticity and traceability of information.
  • Complying with the requirements of ISO/IEC 27001:2022 and the National Security Framework, in line with the defined scope and categorisation level.
  • Applying a risk-based approach to identify, assess and treat threats that may affect information and services.
  • Implementing appropriate technical, organisational and procedural controls to prevent security incidents and respond to them effectively.
  • Ensuring the continuity of services and the resilience of information systems.

People

The AIRCURY group and its people commit to:

  • Ensuring the competence and training of staff in quality, the environment, service management and information security.
  • Fostering awareness and individual responsibility for complying with the established policies, standards and procedures.
  • Promoting the active participation of staff in improving the Integrated Management System.

Compliance

AIRCURY's compliance function commits to:

  • Identifying and complying with the legal, regulatory and contractual requirements applicable to its activity.
  • Periodically evaluating the performance of the Integrated Management System through monitoring, measurement, internal audits and management reviews.
  • Applying corrective and improvement actions that increase the effectiveness, efficiency and maturity of the system.
  • Maintaining this Policy as the frame of reference for setting objectives and improvement plans.

This Integrated Management Policy is communicated to all staff and relevant interested parties, and is available for consultation.

The Policy will be reviewed periodically, and whenever there are significant changes to the organisation, its activity, its context or the applicable requirements.