All information received by or available to IOTA Global Certification Inc. staff, sub-contractors, or committee members — in whatever format — received in conducting audit activities, during other certification activities, or during any dealings with an organization for any other reason, shall be regarded as strictly confidential and shall not be divulged to any third party without the express permission of the organization or individual concerned.

Where IOTA Global Certification Inc. is required by law to release confidential information to a third party, the client or individual concerned shall, unless regulated by law, be notified in advance of the information provided.

Access to Records

All records will be retained in a secure manner, accessible only to authorized staff — either as hard copy or via password-controlled electronic documents.

Sub-contractors will have limited access to information. Records will only be made available to organizations who can demonstrate a legitimate and legal right to view those records, and specifically to Accreditation Bodies.

Confidentiality Declarations

All staff, sub-contractors, directors, and committee members are required to agree to IOTA Global Certification Inc.'s confidentiality policy and sign a confidentiality agreement. Sub-contractors also sign an agreement that includes the responsibility to maintain confidentiality.