Security and Compliance.

Last updated: 27 October 2026

1. Our approach

Security and confidentiality are part of how we work. We apply reasonable technical and organisational measures to protect the information entrusted to us, and we review those measures as our work and systems change.

2. Website security

This website uses encrypted connections (HTTPS). Administrative access to our website, email and related systems is restricted to authorised people. We keep software and access credentials under review.

3. Information handling

We collect only the information we need for the purposes described in our Privacy Notice. Access is limited to people who need it for their work. We retain information only for as long as required for those purposes or by law.

4. Confidentiality

We treat client and partner information as confidential. We do not sell or rent personal information. We share information only with team members, service providers and advisers who need it, and who are expected to protect it.

5. Data protection

Our handling of personal data is intended to align with the Singapore Personal Data Protection Act and the commitments in our Privacy Notice. Depending on applicable law, individuals may have rights of access, correction, deletion or objection. Requests can be sent to info@hubasia.org.

6. Service providers

We use service providers for hosting, email, IT and related services. We select them with care and expect them to apply appropriate safeguards. Some providers may process information outside Singapore. Where this happens, we take reasonable steps to protect the information.

7. Incident response

If we become aware of a security incident affecting personal information, we will assess and contain it, take steps to reduce harm and notify affected people and regulators where required.

8. Compliance

We work to meet the legal and contractual requirements that apply to our engagements. We do not claim certification under ISO 27001, SOC 2 or any other standard unless this has been separately confirmed in writing for a specific engagement.

9. Client requirements

Security and compliance requirements can be agreed in a written engagement. If you need to complete a due diligence questionnaire or discuss a specific control, contact us at info@hubasia.org.

10. No absolute guarantee

No method of transmission or storage is completely secure. While we take reasonable steps, we cannot guarantee absolute security. Please avoid sending sensitive information through the website form. Contact us to arrange a suitable channel.

See also our Privacy Notice and Terms of Use.