Legal
Bring-your-own-device policy
Every professional on JoboFlex brings and uses their own device. This policy is part of each professional's agreement with Nexora Technologies, Inc.
1. Own device
The professional provides, maintains and pays for the computer, internet connection and peripherals needed to deliver the services. Neither JoboFlex nor the client ships hardware.
2. Minimum security requirements
- Full-disk encryption enabled (FileVault, BitLocker, LUKS or equivalent).
- Automatic screen lock after no more than 5 minutes, with a strong password or biometric.
- A vendor-supported operating system with security updates installed within 14 days of release.
- A personal, non-shared user account for client work.
- Multi-factor authentication on every client system that supports it and a password manager for credentials.
- No client data on removable media or personal cloud storage.
3. Client data
Client code and data stay in the client's systems and repositories wherever possible. Local copies are deleted at the end of the engagement, and the professional confirms deletion in writing on request.
4. Networks
Work is performed over a trusted private network or a VPN. Public Wi-Fi requires a VPN.
5. Loss and incidents
Loss, theft or suspected compromise of a device used for client work must be reported to Nexora Technologies, Inc. within 24 hours. Nexora Technologies, Inc. notifies affected clients without undue delay.
6. Client-specific controls
A client may require stricter controls for its engagement, such as a client-managed virtual desktop or managed accounts. These are agreed before the engagement starts.
7. Attestation
Professionals attest to these requirements when they apply and whenever their device changes. Nexora Technologies, Inc. may ask for evidence of compliance.