Opper AI Trust Center

Organization assets are labeled and have designated owners.

The use of portable media in Organization datacenters is prohibited unless explicitly authorized by management.

Organization performs business contingency and disaster recovery tests on a periodic basis and ensures the following: • tests are executed with relevant contingency teams • test results are documented • corrective actions are taken for exceptions noted • plans are updated based on results

Organization identifies the business impact of relevant threats to assets, infrastructure, and resources that support critical business functions. Recovery objectives are established for critical business functions.

Budgets for infrastructure capacity are established based on analysis of historical business activity and growth projections; purchases are made against the established budget and plans are updated on a quarterly basis.

Organization configures redundant systems or performs periodic backups of data to resume system operations in the event of a system failure.

Organization performs annual backup restoration or data replication tests to confirm the reliability and integrity of system backups or recovery operations.

Organization ensures security hardening and baseline configuration standards have been established according to industry standards and are reviewed and updated periodically.