Integrated Management System Policy.

TokenWay provides secure, reliable and transparent services to the financial sector. Our integrated management system is tailored to the nature, scale and risk profile of our services, supporting our commitment to protecting the confidentiality, integrity and availability of information and services.

Our policies

• Security and resilience: we protect information, manage ICT risks, and prepare for incidents and service recovery.
• Quality management: we monitor the performance of processes, the quality of services and continuously improve.
• Protection of financial services: we support secure payments, data protection and controlled processing of financial reports within the relevant scope of DORA, PSD2 and ISO 20022.
• Responsibility: we establish clear roles, manage suppliers and meet applicable legal, contractual and internal requirements.

Our objectives

• Service availability: meet agreed service levels and review availability and capacity indicators at least quarterly.
• Incident response: detect, assess, escalate, and resolve security and operational incidents within defined response and recovery targets.
• Risk treatment: maintain current risk assessments, assign owners and deadlines, and verify the effectiveness of implemented controls.
• Compliance and assurance: complete planned internal audits, address findings by agreed deadlines, and regularly evaluate compliance obligations.
• People and suppliers: provide annual security and quality training and periodically review critical suppliers against defined performance and security criteria.

TokenWay's management ensures the necessary resources and regular review of the system. We continuously update the policy according to changes in services, risks, technologies and customer requirements, as well as regulations.

Management is committed to the continual improvement of the effectiveness and suitability of the Integrated Management System.

← Back to security and compliance