Last updated:
I's Co., Ltd. (the "Company") provides KeyCenter, AI agent automation services that handle customer Amazon account data and business information. Recognizing that protecting information assets is the foundation of trust, the Company establishes this Information Security Policy, aligned with the approach of an information security management system (ISMS) based on ISO/IEC 27001. This English version is provided for reference only. In the event of any discrepancy or inconsistency between the Japanese version and this English version, the Japanese version shall prevail.
1. Basic Policy
The Company appropriately protects the confidentiality, integrity and availability of all information assets it handles, including customer information and data obtained through Amazon APIs, from threats such as leakage, falsification, loss and unauthorized access.
2. Management Framework
The Company appoints a person responsible for information security under the Representative Director, establishes internal rules, and continuously improves its security measures through a cycle of planning, implementation, review and improvement aligned with ISMS principles.
3. Encryption
The Company protects data with encryption, including the following:
- Encryption of communications with TLS.
- Encryption of stored data, backups and authentication tokens.
- Secure management of encryption keys and API credentials, including SP-API and Amazon Ads API refresh tokens, with restricted access.
4. Access Control
The Company restricts access to information assets based on the principle of least privilege, including the following:
- Role-based access permissions for personnel limited to what is necessary for their duties.
- Multi-factor authentication for administrative and production environments.
- Logging and periodic review of access to customer data.
- Prompt revocation of access rights upon transfer or resignation of personnel.
5. Infrastructure and Operational Security
The Company uses reliable cloud infrastructure, separates development and production environments, applies security patches in a timely manner, protects against malware, maintains backups and monitors systems to detect anomalies.
6. Personnel Security and Training
The Company requires employees and contractors to comply with confidentiality obligations and provides regular education and training on information security and personal information protection.
7. Management of Contractors
When entrusting the handling of information to contractors, including cloud and AI service providers, the Company selects contractors that meet appropriate security standards, concludes contracts including confidentiality and security obligations, and supervises them appropriately.
8. Incident Response
In the event of a security incident, the Company promptly takes action to contain the incident, investigate the cause and prevent recurrence. Where required, the Company will notify affected customers and report to the Personal Information Protection Commission and other relevant authorities in accordance with applicable laws.
9. Compliance
The Company complies with laws and regulations related to information security, including the Act on the Protection of Personal Information, contractual obligations with customers, and the data protection policies of Amazon and other platform providers.
10. Vulnerability Disclosure
If you discover a potential security vulnerability in the Company website or Services, please report it to security@keycenter.jp. Please do not publicly disclose the vulnerability before the Company has had a reasonable opportunity to address it, and do not access, modify or delete data of others. The Company will investigate reports in good faith and respond as appropriate.
11. Continuous Improvement
The Company regularly reviews this policy and its security measures in response to changes in the threat environment, technology and business, and works to continuously improve them.
株式会社I's（I's Co., Ltd.）／ 〒160-0021 東京都新宿区歌舞伎町2丁目20番9号 三経75ビル B1F