Vendor Code of Conduct
- Privacy & Data Protection
- Security & Compliance
- Responsible AI
- Legal
- Responsible Business
Privacy & Data Protection
Security & Compliance
Responsible AI
Legal
Responsible Business
Security & Compliance
Vendor Code of Conduct
Echo360 is committed to maintaining high standard of business conduct and ethics, and we seek Vendors who share in our commitments. This Vendor Code of Conduct sets out the minimum standards expected from our valued Vendors and suppliers. This Code is incorporated into all agreements and applies to all of our Vendors.
Ethical Conduct
Compliance, Applicable Laws
Vendors will comply with applicable local and international laws, rules and regulations and will also comply with this Code of Conduct. In the event that any applicable law or regulation is more restrictive than this Code of Conduct, such law or regulation shall govern.
Conflict of Interest
Echo360 is committed to identifying and addressing real and potential conflicts of interest that may arise in the conduct of its business. Vendors must avoid engaging in any activity that would create an actual or apparent conflict of interest regarding their provision of products or services to Echo360. If a Vendor becomes aware of an actual or potential conflict of interest, the Vendor must notify Echo360 immediately.
Competition, Fair Dealing and Gifts
Echo360 seeks to compete in a fair and honest manner and expects the same of its Vendors. Echo360 does not tolerate anti-competitive behavior in any form and seeks competitive advantages through superior performance rather than through unethical or illegal business practices.
Bribery and Corruption
Echo360 does not tolerate corruption or bribery in any form and expects its Vendors not to engage in any form of illegal or inappropriate activity, including corruption, extortion, embezzlement, or bribery, regardless of the country in which the Vendor provides services to Echo360. Soliciting, accepting, offering, paying bribes or making other improper payments, including facilitation payments, is strictly prohibited, whether directly or through any third party.
Money Laundering
Echo360 does not tolerate economic crime, including money laundering and terrorist financing activities. Vendors shall not provide any service or enter into any arrangement that facilitates or may constitute Echo360 being involved directly or indirectly in economic crime.
Sanctions and Export Controls
Vendors must not conduct activities nor assist any other party in violating applicable economic sanctions or export control laws and regulations.
Employment Practices
Echo360 provides equal employment opportunities for all and we expect our Vendors to share the same commitment. Vendors shall not discriminate based on race, ethnicity, color, age, gender, gender identity or expression, sexual orientation, political beliefs, citizenship, national origin, religion, disability, parental status, economic/class status, veteran status, or any other protected status.
Echo360 is committed to comply with applicable wage, hour and overtime laws and regulations. Vendors shall set working hours, wages and overtime pay in compliance with applicable laws in the country or countries in which they operate.
Harassment, Discrimination and Equal Opportunity
Echo360 promotes a working environment in which all individuals are able to make best use of their skills free from discrimination or harassment. Vendors must not tolerate any form of discrimination including but not limited to race, religion, disability, sex and age. Unfair treatment, harassment or any form of bullying will not be tolerated.
Freedom of Association
Echo360 principals and staff have the right to lawfully form and join organizations of their own choosing and peacefully associate. Vendors must comply with applicable laws and regulations governing the legal rights of their employees to join or not to join worker organizations, including trade unions.
Human Rights and Child Labor
Human rights are inherent to all human beings regardless of race, sex, nationality, ethnicity, religion or any other status. Everyone is entitled to these rights, without discrimination. Echo360 is opposed to and does not tolerate any form of child labor.
Human Trafficking and Modern Slavery
Vendors shall not engage in or support human trafficking or modern slavery, including forced, bonded or involuntary labor. Vendors should reject any form of slavery or human trafficking and monitor their supply chain regularly to identify and mitigate any potential risks.
Health and Safety Conduct
Echo360 is committed to maintaining a safe and healthy workplace in line with internationally declared human rights and expects the same commitment from Vendors. Vendors shall provide a healthy and safe working environment and shall minimize and respond to health and safety incidents and accidents occurring in the workplace. Vendors must conform to all applicable health and safety laws, regulations, and to industry codes and provide adequate personal protective equipment where required.
Environmental Conduct
Echo360 is committed to minimizing the direct and indirect environmental impacts of its operations and works to continuously improve its environmental performance. Echo360 aims to promote a more sustainable supply chain and is working towards proactive engagement to mitigate environmental impacts.
Echo360 expects Vendors to identify and manage the environmental impacts of their organization, to minimize greenhouse gas emissions and to promote environmental responsibility, effective waste management and efficient use of natural resources.
Additional Vendor Policies
Intellectual Property
Echo360 is committed to protecting its intellectual property. We expect Vendors to respect the intellectual property rights of Echo360 and others. Vendors shall not use Echo360 intellectual property in a manner that is not authorized by us nor other parties’ unlicensed software or technology in support of or in connection with work for or with Echo360.
Confidentiality and Data Privacy
Echo360 requires its Vendors not to disclose and maintain the confidentiality of information accessed through their contractual relationship with us. Vendors must ensure that their personnel authorized to handle our data commit to confidentiality and adopt appropriate technical and organizational measures to safeguard our information.
Vendors must adhere and strictly comply with applicable data protection, privacy, and information security laws and associated regulatory requirements as well as with the highest industry standard information security policies whenever our confidential and proprietary information, and particularly personal information, is collected, stored, processed, disclosed, transferred and/or shared. Vendors must process personal data strictly according to Echo360’s instructions.
Information Security
Echo360 expects Vendors to be committed to protecting information entrusted to it, as well as physical and IT assets, through information security controls. Vendors shall develop, implement and use information security controls that meet Echo360’s requirements to maintain and protect information, including physical and electronic assets, obtained from Echo360, our clients and other third parties.
Vendors shall ensure their Information Security Program: (i) includes administrative, technical, and physical safeguards consistent with applicable federal and/or state statutes or regulations, (ii) describes physical security, change management procedures, and privacy policies, (iii) protects against unauthorized access and anticipated threats, and (iv) maintains confidentiality, integrity, availability, and disposal, of Echo360 information.
Due Diligence and Monitoring
Vendors must have processes and controls in place to comply with this Code. Where appropriate, Echo360 may conduct risk-based due diligence to assess its relationship with Vendors. Vendors must provide complete and accurate information to facilitate due diligence efforts undertaken by Echo360, where requested.
General Terms
Vendors who work for or with Echo360 agree to: adhere to the requirements and expectations set out in this Code; provide complete and accurate information to facilitate third party due diligence efforts undertaken by Echo360; and comply with the applicable laws and regulations in the country or countries where they operate.
Our Vendors are directed to report observed illegal or unethical behavior to the Echo360 Legal Department at legal@echo360.com or any of our executive officers. This Code will be reviewed periodically and the updated Code will be available on our website.