1. Purpose and Scope

Black Ace Technology exists to deliver high-quality IT consultancy, software development, cloud services, information security, licensing, training, and support – helping clients transform their businesses. This Company Policy sets the standards for behaviour, operations, and use of resources within Black Ace Technology. It applies to all employees, contractors, consultants, and any third-party working under the company’s name.

The goal is to ensure consistency, security, professionalism, and accountability across all engagements and internal operations.

2. Core Values & Principles

Black Ace Technology commits to the following values:

• Customer-centricity: Our clients’ needs guide our actions.
• Integrity & professionalism: We act ethically, responsibly, and transparently in all dealings.
• Quality & excellence: We deliver robust, secure, and well-designed solutions.
• Confidentiality & security: Client data, company data, and internal information are handled with utmost confidentiality and protected against unauthorized access.
• Continuous improvement: We learn, adapt and evolve our practices in response to new challenges and technologies.

3. Code of Conduct & Ethics

3.1 Professional Behaviour

• Employees and contractors must treat clients, colleagues, and third parties with respect and professionalism at all times.
• Discrimination, harassment, or any behaviour that undermines dignity or professionalism is strictly prohibited.
• Employees must uphold honesty in all dealings – no misrepresentation of skills, deliverables, status, or timelines.

3.2 Confidentiality & Data Protection

• All sensitive information – client data, internal documents, credentials, source code, configuration details – must be treated as confidential.
• Unauthorized disclosure, sharing, or publication of confidential data is forbidden.
• Access to systems/data must follow the principle of least privilege: only those who need access get it, and only for as long as necessary.
• Company-issued devices, accounts, and credentials are for official use only – personal use should be minimal and must never compromise security or compliance.

3.3 Use of Company Resources

• Company hardware (laptops, servers, network infrastructure), software (licenses, codebase), and cloud resources must be used solely for legitimate business purposes.
• Use of personal devices or third-party services must be pre-approved if they interact with company or client data (BYOD policy).
• Any software licensing, procurement, or installation must follow company approval processes.

4. Attendance, Remote Work & Communication Policy

• Employees are expected to follow the agreed working hours and attendance guidelines as set by their manager or the company’s operational needs.
• For remote work / telecommuting: employees must ensure a secure working environment (private space, secure internet connection), use company-approved tools, and comply with confidentiality obligations.
• Communication with clients must remain professional. Use of company email or communication platforms should follow company standards; personal social media or messaging for official communication is discouraged.

5. Security & Information-Technology Policy

Given that Black Ace Technology delivers IT, cloud, and security services, we maintain strict internal IT & security standards:

• All software development, deployment, maintenance, and cloud operations must comply with designated security practices and coding standards.
• Strong passwords, multi-factor authentication (MFA), encryption (when handling sensitive data), secure backups, and access logging are mandatory across all systems.
• Any security incident, suspected breach, or data leak must be reported immediately to management or the designated security officer.
• Employees must not install unauthorized software or use unlicensed tools. All software use must be licensed and approved.
• Third-party vendors or contractors must sign Non-Disclosure Agreements (NDAs) before accessing any sensitive information or systems.

6. Training & Professional Development

• Black Ace Technology supports continuous learning. Employees are encouraged to attend internal or external training sessions relevant to their roles.
• Company-provided training is considered part of working hours.
• Employees must stay up to date with emerging security practices, software frameworks, and compliance guidelines relevant to our services.

7. Compliance, Violations & Disciplinary Actions

• Violation of this policy may result in disciplinary action – from reprimand to termination, depending on severity and context.
• Unauthorized disclosure or misuse of confidential data can lead to immediate dismissal and, where applicable, further legal or financial consequences.
• Repeated or serious breaches of professional conduct, failure to meet obligations, or violation of security policy will be taken seriously.

8. Review and Revision of Policy

• This policy will be reviewed at least annually or whenever there are significant changes to business operations, services, legal requirements, or technology stack.
• Employees will be notified of revisions. It is the responsibility of all employees to stay informed about policy updates.
• Feedback and suggestions for improvement are encouraged – employees may submit proposals to management or HR for consideration.

9. Contact & Clarifications

If you have questions, concerns, or need clarification on any aspect of this policy – including acceptable use, security practices, data handling, remote work, or code of conduct – contact +256 393 100 300 or to info@blackacetechnology.com