Trust Center

NEMOPH holds employee and financial records for the companies that use it. This page explains how we protect that data and what we can, and cannot yet, claim.

Privacy law

We handle personal data in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission. When your company uses NEMOPH, your company is the personal information controller and we process data on its behalf.

One directory

Each person has one record in the employee directory, so when someone joins or leaves, every AICO System app your company runs is updated from one place.

Data protection and access

Data is encrypted in transit. Access to production systems is limited to authorized staff. Inside NEMOPH, your admins decide which people can use which apps.

Backup and data retention terms are set out in your customer agreement.

Breach notification

If we become aware of a personal data breach that affects your company, we will notify you without undue delay and share what we know, so you can meet the 72-hour notification required by the National Privacy Commission.

Certifications

We do not currently hold SOC 2 or ISO 27001 certification. If your procurement process requires security documentation, contact us and we will share what we have.

Data Protection Officer

You can reach our Data Protection Officer at [email protected].

Reporting a vulnerability

If you believe you have found a security issue, please email [email protected]. We appreciate responsible disclosure and will respond promptly.

Questions about this page? Talk to our team or see our Privacy Policy and Terms of Service.