Information Security Policy
Last updated: 28/09/26
At BUSAE, a brand of Heimdal Seguridad S.L., we consider information security an essential element in delivering reliable services and maintaining the trust of our customers, users and partners.
Our Information Security Management System is aligned with the principles and requirements of the Spanish National Security Framework (Esquema Nacional de Seguridad, ENS). Its purpose is to protect the confidentiality, integrity, availability, authenticity and traceability of the information handled in the operation, administration and support of our SaaS platform for public transport.
We make the following commitments:
- Protect information and personal data, complying with applicable regulations and our contractual commitments to our customers.
- Manage risks and build security in by design, applying measures for the prevention, detection, response to and recovery from incidents.
- Support the continuity of our services through protection measures, backups and recovery procedures.
- Promote a security culture through staff training and collaboration with suppliers and third parties.
- Continuously improve by reviewing our controls, assessing their effectiveness and adapting them to new threats and needs.
Management drives these commitments and provides the resources needed to carry them out. This policy is mandatory for all staff and third parties within its scope, and it is reviewed at least once a year and whenever significant changes occur. With this public statement, we share our commitment to secure technology, service quality and the continuous improvement of BUSAE.
Approved by the General Management of Heimdal Seguridad S.L. — September 2026.
- Email: info@busae.com
- Postal address: Avda. Cortes Valencianas, 58. Oficina 603. Edificio Sorolla Center, 46015, Valencia, Spain
- Phone: +963726265