Information Security Policy
Effective: 2 November 2026
Bedrock Partners Japan G.K. recognises the confidentiality, integrity and availability of client, partner and business information as a foundation of its cross-border activities. This policy guides the protection of those information assets.
1. Scope and responsibility
The policy covers client and prospect information, research, technical and commercial materials, contracts and correspondence. The Managing Director is responsible for information management. Contractors and collaborators are expected to handle information appropriately for their roles.
2. Purpose-limited access and sharing
Information is accessed, used and shared only for necessary business purposes and with appropriate recipients. In introductions and international discussions, Bedrock checks authority to disclose, confidentiality obligations and handling restrictions. Non-public information must not be repurposed or disclosed without authority.
3. Protecting accounts, devices and data
Measures proportionate to risk and business scale include stronger authentication, restricted permissions, appropriate device and software management, secure communication and sharing, and necessary backups. Information and equipment no longer needed are disposed of appropriately to prevent residual data exposure.
4. External services and AI
Before using cloud, translation or generative AI services, Bedrock considers confidentiality, service terms, retention and secondary use of inputs. Non-public client information and personal information must not be entered without confirming contractual authority and appropriate safeguards. Outputs are checked as necessary, respecting information rights and contractual conditions.
5. Incident response
If loss, disclosure or unauthorised access is identified, Bedrock works to contain the impact, establish the facts, restore operations, determine causes and prevent recurrence. Affected parties are contacted and reports made as required by law or contract.
6. Compliance and review
Bedrock observes applicable laws, confidentiality agreements and other commitments, and reviews safeguards as threats and working conditions change. The Managing Director and collaborators maintain awareness appropriate to their roles. Security enquiries or concerns: info@bedrock.co.jp.