Endpoint Protection Policy

Device protection

• Company Mac devices use Apple's built-in protection (XProtect and Gatekeeper). Apple updates these protections. Devices are kept on current macOS.
• Disk encryption (FileVault) is on for company devices.
• Multi-factor authentication is enforced on staff accounts that access production systems.
• Staff report suspected malware to security@cerqular.ai immediately.
• Daily scheduled malware scans are in place on founder devices.
• This policy is reviewed at least once a year. Last updated 22 October 2026.

Status of this text

Counsel review of this policy has not been completed. It states what the code and the infrastructure do today, and where a control is not yet in place it says so.

Other policies

• Information Security Policy
• Access Control Policy
• Incident Response Policy
• Data Classification Policy
• Vulnerability Management Policy
• Data Protection Policy
• Breach Notification Policy