Information Security Policy
Issued: 1 October 2026
MirAI develops and integrates AI Agents into the systems of banks and financial institutions. The information customers entrust to us is directly tied to people's money and trust. Protecting information security is therefore our first responsibility in everything MirAI does. We issue this Policy and commit to carrying it out across the whole company.
1.Scope
This Policy applies to all information assets managed by MirAI, including customer information, company information, systems, devices and AI Agents, and to every MirAI member, including personnel working under contract.
2.Governance
The CEO holds the highest responsibility for information security. MirAI assigns clear responsibility for information-security management to each project and each system.
3.Legal compliance and commitments to customers
We comply with the laws on cybersecurity, information security and personal data protection of Vietnam, Japan and the country where the customer operates, as well as the information-security requirements in each customer's contract and rules.
4.Protective measures
We apply organizational, human, physical and technical measures together: access control on a least-privilege basis, including for AI Agents; encryption and separation of data by sensitivity; protection of offices and devices; and monitoring and logging of system access.
5.Training
Every MirAI member receives regular information-security training and undertakes to keep customer and company information confidential, including after leaving the company.
6.Management of partners and suppliers
When using third-party services, including cloud services and AI models, we assess the provider's security and bind it to confidentiality obligations by contract.
7.Incident response
When an information-security incident occurs or a risk of one is detected, we act at once to limit the damage, notify customers and competent authorities promptly as required, and find the cause and take measures to prevent recurrence.
8.Continuous improvement
This Policy and our security measures are reviewed regularly and updated as technology, threats and the law change.