Security & Compliance Portal

Built on a foundation of
trust & transparency

Word Works AI maintains rigorous information security controls across all operations. Review our policies, certifications, and compliance posture.

ISO 27001 Aligned ISO 23001 Compliant SOC 2 Target HIPAA Ready
14Active Policies
ISO 27001Aligned Framework
SOC 2Target Standard
May 2026Last Reviewed

Compliance coverage

Our ISMS covers the full information security lifecycle, from access control to business continuity and data privacy.

Access control
Role-based and rule-based access management with least-privilege principles across all critical systems.
RBACMFA enforcedSSO supportedQuarterly review
Policy and procedure active
Asset management
Comprehensive inventory of infrastructure, software, physical, and people assets with defined ownership.
Full inventorySprinto monitoredBYOD policy
Policy and procedure active
Business continuity and DR
Documented BCP and disaster recovery procedures with annual mock drills and RTO/RPO evaluation.
BCP documentedAnnual drillRTO/RPO defined
Policy and plan active
Incident management
Structured incident detection, reporting, classification, and resolution with post-incident learnings.
Sprinto trackingRoot cause analysisLegal compliance
Policy active
Network and communications
Firewalls, IDS/IPS, encrypted transfers, NDA requirements, and annual vulnerability assessments.
IPS/IDS deployedAnnual VANDA enforced
Policy active
Physical and environmental security
Cloud-native infrastructure security with office physical controls, clean desk policy, and remote work guidelines.
Cloud-nativeClean deskRemote work policy
Policy and procedure active
PHI data breach notification
HIPAA-compliant procedure for PHI breach detection, assessment, notification, and regulatory reporting within 60 days.
HIPAA aligned60-day SLARegulatory reporting
Procedure active
Compliance and governance
ISO 27001, ISO 23001, SOC 2 alignment, IP rights protection, data privacy, and code of business conduct.
ISO 27001ISO 23001SOC 2 targetAnti-bribery
Policies active

Policy documents

All 14 policies are reviewed annually and approved by our Information Security Officer. Request access to view full documents.

Security policies
Acceptable Usage Policy
Version 1  ·  Approved 25 May 2026  ·  6 pages
NDA required
Access Control Policy
Version 1  ·  Approved 28 May 2026  ·  8 pages
NDA required
Access Control Procedure
Version 1  ·  Approved 28 May 2026  ·  6 pages
NDA required
Communications and Network Security Policy
Version 1  ·  Approved 28 May 2026  ·  6 pages
NDA required
Physical and Environmental Security Policy
Version 1  ·  Approved 28 May 2026  ·  5 pages
NDA required
Physical and Environmental Security Procedure
Version 1  ·  Approved 28 May 2026  ·  6 pages
NDA required
Asset and data policies
Asset Management Policy
Version 1  ·  Approved 28 May 2026  ·  6 pages
NDA required
Asset Management Procedure
Version 1  ·  Approved 28 May 2026  ·  6 pages
NDA required
PHI Data Breach Notification Procedure
Version 1  ·  Approved 28 May 2026  ·  6 pages
NDA required
Continuity and resilience
Business Continuity and Disaster Recovery Policy
Version 1  ·  Approved 28 May 2026  ·  6 pages
NDA required
Business Continuity Plan
Version 1  ·  Approved 28 May 2026  ·  6 pages
NDA required
Governance and compliance
Compliance Policy
Version 1  ·  Approved 28 May 2026  ·  5 pages
NDA required
Code of Business Conduct Policy
Version 1  ·  Approved 28 May 2026  ·  6 pages
NDA required
Incident Management Policy
Version 1  ·  Approved 28 May 2026  ·  6 pages
NDA required
Document
Viewing document 1 of 14