Security and Confidentiality Policy

Confidentiality

Everything an operator sees while monitoring a client site is confidential. Personnel are bound by confidentiality obligations covering camera feeds, monitoring records, business information, and anything observed on site.

Personnel controls

• Operators are trained on the monitoring protocol for each site they are assigned to.
• Access is limited to the client systems required for the work assigned.
• Confidentiality obligations continue after an individual leaves the engagement.
• Personal recording devices are not permitted in monitoring positions.

Technical controls

• Named, role-based accounts for every system, in line with the Authorized Account Access Policy.
• Multi-factor authentication where the platform supports it.
• Credentials held in controlled storage, never in messages or shared files.
• Access reviewed periodically and revoked at the end of an engagement.

What is never published

Netex Security will never publish, in a case study, on this website, or in any marketing material:

• Camera passwords or system credentials
• IP addresses, hostnames, or network details
• Exact camera positions or coverage maps
• Alarm codes or access codes
• Private escalation procedures or contact lists
• Confidential financial records
• Employee personal information
• Identifiable footage of any individual without written consent

Incident response

If we become aware of unauthorised access to a client system through our access, or of a confidentiality breach, the client is notified without undue delay, our access is suspended pending review, and we support the client's response.

Client obligations

Security is shared. Clients are asked to issue named credentials rather than shared logins, to notify us when their own staff change, and to disable our access promptly at the end of an engagement.

This policy was last reviewed in July 2026.