Privacy Policy

At ICARO S.A.S. we recognize that trust is the main asset of our relationship with clients, partners, suppliers, and users of our technology platforms. We protect entrusted information under legality, transparency, confidentiality, integrity, availability, and accountability principles established by Colombian law and international risk and information-security practices.

Data controller: ICARO S.A.S. Email: privacidad@icaroriskmanagement.com. Website: www.icaroriskmanagement.com.

We may collect, among other items: identification and contact data; employment, business, and financial information needed for commercial processes; information provided in due diligence; information obtained in authorized investigations; photographic and audiovisual evidence; georeferencing of dwelling images; remote monitoring and SaaS platform records; and technical browsing information.

Information may be used to deliver services; prepare risk analyses; perform due diligence; manage BASC and AEO; evaluate suppliers; conduct security studies; provide remote monitoring; manage incidents; administer contracts; invoice; support customers; comply with law; improve services; and develop new technology products.

ICARO implements administrative, technological, and physical controls to protect information against loss, alteration, unauthorized access, disclosure, and destruction, with measures proportional to information criticality.

Information is retained only for as long as necessary to meet legal, contractual, and regulatory purposes.

ICARO recognizes data-subject rights under Colombian law. When acting as a data processor (background checks, due diligence, corporate investigations, reliability assessments, security studies, or similar services contracted by a third party), ICARO processes information on behalf of and under instructions from the client controller. Technical reports are for the contracting client’s exclusive use. Requests about the client’s decisions must go to that controller; ICARO responds directly only within its controller/processor scope. Exercising rights does not oblige ICARO to disclose methodologies, algorithms, protected sources, or trade secrets except where legally required.

ICARO technical opinions are specialized assessments based on information available at the time of evaluation and are not absolute statements or administrative, employment, commercial, or judicial decisions. Final decisions belong to the contracting client.

ICARO performs analyses with technical independence, objectivity, and impartiality. Absence of findings does not certify absence of risk; findings alone do not determine the client’s decision.

ICARO may update this policy when regulatory or operational changes occur.