Security Policy

Information Security Management at IOT Lenses

IOT Lenses maintains an Information Security Management System (ISMS) aligned with and certified in accordance with ISO/IEC 27001, the international standard for information security management.

Our commitment is to provide and maintain the highest levels of service quality, generating the maximum possible guarantees of information security for our customers, partners, and stakeholders.

Purpose and commitment

The purpose of our Information Security Management System is to ensure effective process management and risk analysis, enabling control, continuous improvement, and compliance with our commitments to quality and information security.

This approach supports:

The integration and involvement of our staff in the development and maintenance of secure processes
Compliance with applicable legal, regulatory, and contractual requirements
The pursuit of maximum customer satisfaction

All of this is based on personal development, a sense of belonging to the organization, efficient use of resources, and a structured approach to process management and risk analysis as essential elements for achieving continuous improvement.

Scope of the Information Security Management System

The Information Security Management System supports the following activities:

Development and marketing of ophthalmic lens designs, as well as other innovative technological solutions for manufacturing and distribution in the optical industry.

The ISMS applies to the systems, processes, information assets, and organizational controls necessary to support these activities, as defined within the certified scope.

Certification and standardization

Aware of the need for internationally recognized standardized systems, IOT Lenses has implemented, maintains, and continuously improves an Information Security Management System certified under ISO/IEC 27001.

This certification confirms that the organization manages information security through a structured, risk-based framework that is subject to regular internal review and independent external audits.

View ISO 20017 Certificate

Management commitment and guidelines

Management is committed to leading and maintaining the Information Security Management System in accordance with ISO 27001 requirements, based on continuous improvement and the following guidelines:

Understanding stakeholder needs
A firm commitment to understanding the needs and expectations of customers and other interested parties, with the objective of achieving satisfaction and continuous improvement through the definition, monitoring, and regular review of information security objectives.
Legal and regulatory compliance
A commitment to complying with all applicable legislation and regulations, as well as contractual and other agreed requirements related to information security.
Protection of information assets
Ensuring the security of IOT Lenses’ own information and that of its customers.
As part of its activities, the organization processes different types of information as an essential element of its operations. Information systems, applications, communication infrastructures, files, and databases are recognized as critical company assets.
Management prioritizes the confidentiality, integrity, and availability of information when defining objectives, responsibilities, and technical and organizational measures, and monitors compliance with the legal framework, internal policies, and defined procedures.
Competence and continuous improvement
A commitment to the continuous review of competencies and to ongoing improvement in order to guarantee the security of service information and the organization’s ability to respond to the evolving challenges posed by customers.
All staff commit to improving services, supporting processes, and responsible information security behavior within their respective roles.

Organizational responsibility

All staff at IOT Lenses accept the commitment to improve services and auxiliary processes within the organization and to develop responsible information security practices appropriate to their roles and responsibilities.

Carolina Gago Olmedo
COO

Last updated: February 2026