Security & Compliance

Our Approach to Security

Bota Group is the registered trade name (DBA) of Bota Consulting Group Inc., a Delaware corporation authorized to conduct business in New York. Security and confidentiality are central to how we operate. Because we embed professionals into our clients’ operations and handle sensitive information for candidates, clients, and contractors, we take a careful, ongoing approach to protecting that information.

This page describes the measures we use. It is a general description, not a technical specification, and our practices continue to evolve as our business grows.

Protecting Everyone We Work With

Our security program is designed to protect the people and organizations we work with:

• Candidates: we protect application materials, resumes, and personal information throughout the recruiting process.
• Clients: we protect the business information clients share with us and the work our placed professionals perform.
• Contractors: we protect the information of the professionals we engage and place.
• Employees: we apply the same standards internally to our own team.

Data Protection

We maintain administrative, technical, and physical safeguards designed to protect personal and business information against unauthorized access, use, alteration, and disclosure. Our data protection practices are described further in our Privacy Policy.

Encryption

We use encryption to help protect information, including encryption of information in transit and, where appropriate, at rest. We work to keep our encryption practices aligned with accepted industry standards.

Access Controls

We limit access to information to those who need it to perform their roles. We apply role-based access, require authentication, and support additional protections such as multi-factor authentication where appropriate.

Device and Password Security

We set expectations for the security of the devices used to access information, and we require strong, unique passwords and good password practices. We promote multi-factor authentication and secure configuration of devices used by our team and contractors.

Secure Document Handling

We handle documents and files securely, store them in protected systems, limit who can access them, and dispose of information appropriately when it is no longer needed, consistent with our Data Retention and Deletion Policy.

Vendor Security

We work with third-party service providers to operate our business. We conduct appropriate due diligence on these providers and require them to maintain confidentiality and to protect information consistent with applicable law and our agreements with them.

Background Screening

Where appropriate and lawful, and where a client or role requires it, we conduct background screening on candidates with their consent. Our screening practices are described in our Background Screening Notice.

Incident Response

We maintain an incident response process so that, if a security incident occurs, we can respond, investigate, and take appropriate action. Where a security incident affects personal information, we will provide notifications as required by applicable law.

Continuous Improvement and Future Certifications

We treat security as an ongoing commitment and continue to strengthen our practices over time. We may pursue recognized certifications or attestations in the future, such as ISO 27001 or SOC 2. We do not currently hold these certifications and do not claim certification at this time.

Reporting a Security Concern

If you believe you have found a security vulnerability or have a security concern, please contact us at security@botaconsultinggroup.com. We take security reports seriously and will review them promptly.

Contact Us

Bota Consulting Group Inc. d/b/a Bota Group

75 South Broadway, Suite 400, White Plains, New York 10601

Email: security@botaconsultinggroup.com