This Proprietary Information and Data Security Agreement (the “Agreement”) is executed alongside the Independent Contractor Services Agreement and establishes strict, legally binding protocols regarding data confidentiality, asset protection, and cyber-security compliance between Gifton (the “Company”) and the Service Provider (the “Contractor”).
1. Definition of Proprietary Information
The Contractor acknowledges that during the course of their engagement, they will have access to non-public, high-value digital assets and operational structures. “Proprietary Information” refers to any data owned, licensed, or utilized by the Company, categorized as follows:
- System Metrics: Access credentials, passwords, encryption tokens, and API configurations for any Company network, proprietary internal portal, CRM database, or cloud server.
- Operational Frameworks: Operational scripts, task queues, supplier metrics, digital asset valuations, project frameworks, and specialized trade methodologies developed by the Company.
- Workforce Records: Personal contact details, CNIC data, banking channels, and performance logs of any other team member or independent contractor affiliated with the Company.
2. Non-Disclosure & Absolute Data Lock
- 2.1 Strict Confidentiality: The Contractor shall hold all Proprietary Information in absolute trust and confidence. Under no circumstances shall this data be disclosed, leaked, or distributed to any third party, competitor, external forum, or public digital platform.
- 2.2 Anti-Export Restriction: The Contractor is strictly prohibited from exporting, downloading, copying, or taking external backups of database entries, contact sheets, asset logs, or source code, unless expressly authorized in writing by Company management for immediate operational execution.
3. System Access Controls & Blind Production Safeguards
- 3.1 Blind Production Standard: The Company utilizes strict blind production standards and data-masking layers within its proprietary internal portals and Customer Relationship Management (CRM) systems to restrict worker access to sensitive client metrics and underlying source data. The Contractor is strictly prohibited from trying to bypass, reverse-engineer, or circumvent these access controls.
- 3.2 Account Security: Access credentials provided to the Contractor are strictly personal and non-transferable. Sharing credentials or letting anyone else access Company portals via the Contractor’s account constitutes immediate corporate espionage and a material breach of contract.
4. Removable Media and External Storage Restrictions
- 4.1 Local Storage Prohibition: No Proprietary Information or internal operational data may be saved directly onto personal computer hard drives, external USB flash drives, or personal cloud storage accounts (e.g., personal Google Drive, Dropbox).
- 4.2 Screen Capture Restrictions: Taking screenshots, video recordings, or mobile phone photos of active system interfaces, data pipelines, internal portals, or official team communications without explicit management approval is strictly forbidden.
5. Material Remedies, Forfeiture, and PECA Enforcement
A breach of data security inflicts immediate, severe financial and operational damage on the Company. Consequently, any violation of this Agreement triggers the following immediate actions:
- Instant Disconnect: Immediate and permanent deactivation of all internal network logins, platform accounts, and workspace access.
- Complete Financial Forfeiture: Automatic forfeiture of all pending, unpaid, or accrued stipends and payments as a pre-agreed minimum penalty for data compromise.
- Statutory Criminal Escalation: Because data theft and unauthorized system access constitute federal offenses, the Company will actively report breaches violating the Prevention of Electronic Crimes Act (PECA), 2016 of Pakistan to the Federal Investigation Agency (FIA) Cyber Crime Wing for criminal prosecution.
Digital Execution Acknowledgment
By clicking “I Accept,” checking the digital confirmation box, or electronically signing this document, the Contractor certifies that they understand that data safety is the core foundation of Gifton’s remote environment, and that any unauthorized disclosure or mishandling of data results in immediate termination for cause and potential federal law enforcement action.