In the company ZenLab d.o.o., we recognize our responsibility to protect information in the performance of our activities and in our business relationships with customers, partners, and other interested parties. As a company with extensive experience and expertise in the development of complex and comprehensive information technology solutions for customers and software providers, information security is one of the key foundations of our business.

 

The Company has established and maintains an Information Security Management System (ISMS) in accordance with the international standard ISO/IEC 27001. We are committed to complying with the requirements of ISO/IEC 27001, applicable legal, regulatory, contractual, and other relevant requirements, and to the continual improvement of the effectiveness of the Information Security Management System.

 

The Information Security Management System Policy is aligned with the Company's strategy and supports the achievement of its business objectives.

 

The primary objectives of the Information Security Management System Policy are to:

• ensure the security of information and information technology solutions throughout their entire lifecycle, including development, implementation, and maintenance;

• strengthen customer trust by maintaining a high level of information security and complying with contractual, legal, and regulatory requirements;

• manage information security risks and ensure the continuity and reliability of critical business processes and services;

• continually improve the Information Security Management System and foster a culture of secure information handling.

 

The purpose of this Information Security Policy is to ensure appropriate protection of information and information assets according to their importance to the Company's business, primarily by ensuring:

• Confidentiality – protecting information against unauthorized disclosure and ensuring that access is granted only to authorized persons;

• Integrity – ensuring the accuracy, completeness, and integrity of information, and preventing unauthorized modifications through appropriate organizational and technical controls;

• Availability – ensuring that information and information services are accessible to authorized users within the agreed or acceptable timeframe.

 

All employees and contractual partners are required to act in accordance with this Policy and, through their work, contribute to the effective operation and continual improvement of the Information Security Management System.

​

Maribor, 7. 9. 2026

Robert Srdič Senčar, Managing Director of ZenLab d.o.o.