Our Commitment
“We ensure that all our products and services are built on trust.”
With over 100 years of experience, Esko has been safely and securely delivering packaging design and artwork solutions to our customers.
Our mission is to unlock the potential of every packaging design and artwork team by providing a future-proof platform. This enables our customers to accelerate collaboration, achieve outstanding results quickly, reduce risks, and empower teams of all sizes, industries, and expertise. We achieve this by protecting you and your people through a comprehensive commitment to security, privacy, compliance, and accessibility, all reflected in our Trust Center.
Trust is at the core of our work and products. When someone trusts our company, they continue to use our products and services or aspire to work with us. This trust extends to the technologies that underpin and power our offerings. We understand that trust is not only about ensuring the security and privacy of our products but also about earning and maintaining it through our actions and commitments to reliability and performance.
At Esko, we strive to build and maintain trust with you. We ensure that all our team members are dedicated to protecting your packaging design and artwork data at all times, which in turn helps you build digital trust with your employees and customers.
Questions on digital trust? Contact us here
Security
“We take the security of our customers, partners, associates, and assets seriously.”
At Esko, we understand the critical importance of security and operational risk management. We continuously evaluate our risk and security capabilities and are committed to making strategic investments in people, processes, and technologies to ensure the most comprehensive protection for our customers, partners, employees, and assets.
We conduct independent assessments and maintain board-level visibility into our strategic cybersecurity and operational risk objectives. By leveraging industry-leading providers and dedicating resources, we ensure effective risk and security management.
Regular risk analyses, including various tests of cyber, system, and process controls, are conducted either internally or by certified third-party providers. These assessments cover a range of control types to ensure necessary and ongoing safeguards.
Ongoing security safeguards
- Administrative Safeguards: These include training, documentation, practices, policies, and procedures that align with the organization’s security and compliance goals. They cover areas such as employee hiring and termination, equipment usage, Internet usage, physical access to company facilities, separation of duties, data classification, auditing, and security or risk training. READ MORE
- Technical Safeguards: These involve hardware, software, and other technological mechanisms used to protect assets. Common examples include authentication solutions, firewalls, antivirus software, intrusion detection systems (IDSs), and access control lists (ACLs) that protect access to data, networks, and systems. READ MORE
- Physical Safeguards: These are mechanisms designed to prevent or detect unauthorized access to physical areas, systems, or assets. Examples include security badges, locking doors, access cards, biometric access controls, video cameras, surveillance cameras, fire suppression systems, and other environmental controls. READ MORE
Given that Esko and its affiliated companies receive thousands of audits, cyber, and risk-related requests annually, we hope our audit management approach and this Digital Trust Center provide sufficient detail to meet your security requirements. However, we can provide additional information under a Non-Disclosure Agreement (NDA) and, in certain circumstances, are willing to host an on-site review with select executive management and expert resources. Please contact your Esko account manager for further information.
We refer to our Certification and Awards page for more information
Privacy
Esko believes in putting people and their privacy first. We value our customers’ privacy and trust, and we handle your data with the utmost care and integrity. We understand what’s at stake and always operate in a highly secure and professional manner when handling your information.
We recognize our responsibility to safeguard personally identifiable information (PII) and other non-public personal or financial information of our customers, their employees, and participants from unauthorized access or use. We take this responsibility seriously and will never knowingly use customer data for purposes other than those clearly defined within our privacy policy and agreements, except as required by law.
As a third-party administrator, Esko maintains limited access to the data we process on your behalf in connection with our products and services. We do not access your data for any reasons unrelated to the operation and maintenance of our products and services. Instead, we provide our customers with the necessary control over their own data, including the ability to access it to meet data privacy and compliance attestation requirements.
Esko solutions adhere to the highest industry standards and world-class practices, taking into account privacy laws and regulations in the regions where we operate.
The trust we enjoy from our customers today stems from many years of safely and securely providing our products and services, and our ongoing commitment to maintaining and continuously improving our privacy controls. As technologies evolve, such as with touch-based technology, we remain dedicated to adapting and enhancing our privacy measures.
Esko’s privacy controls and processes cover protected data received in any tangible and/or digital medium, ensuring comprehensive protection and compliance within our Privacy Policy.
Compliance
Esko understands that our products and services are subject to various laws and regulations, as well as customer compliance requirements and audits. To address this, we implement a comprehensive compliance program with codes and procedures based on robust compliance controls. These controls are designed to correct, prevent, detect, and mitigate potential compliance violations.
Our compliance controls undergo annual SOC2 audits, and our codes and procedures are regularly reviewed, tested, and updated by our Digital Trust department.
Compliance – Our compliance program specifically addresses relevant privacy and security laws and regulations. The Esko compliance program is carefully tailored to support our customers’ needs and includes numerous features and functions for regulatory, security, and privacy risk management:
- Codes and Procedures: Based on applicable laws and industry best practices, regularly updated, tested, and enforced.
- Periodic Risk Assessments: Conducted to identify and mitigate potential risks.
- Knowledgeable and Empowered Leadership: Supported by a strong corporate culture of compliance, state-of-the-art regulatory monitoring tools, and credentialed regulatory, security, and privacy experts.
- Stringent Training Requirements: Mandatory training for all employees to ensure compliance.
- Monitoring and Assessment Mechanisms: Implemented to continuously evaluate compliance.
- Oversight of the Esko Code of Conduct: Ensuring adherence to our business ethics requirements.
The Esko team is dedicated to staying up-to-date with the latest relevant laws and regulations, maintaining world-class certifications, and adhering to industry standards. This commitment ensures that all customers are protected whenever they use Esko solutions and services.
AI Ethics
As the leading packaging design and artwork software company, Esko recognizes the immense potential that artificial intelligence (AI) technology offers to our customers and users. We are committed to the responsible innovation, development, and use of AI and associated technologies, continually providing best-in-class products that enhance efficiency and outcomes, thereby increasing customer value.
We believe it is our responsibility to employ AI with principled approaches. We understand that the use of AI requires ethical considerations, the preservation of trust, and strong data protection commitments. At Esko, we believe that responsible AI use and development are essential to our continued success and the advancement of our industry as a whole.
Integrity is the foundation of everything we do at Esko. Every person using AI solutions (known as “AI users”) is obligated to use AI ethically, responsibly, and in compliance with applicable laws and regulations. This responsibility includes prohibiting the use or entry of confidential, restricted, or unapproved data into AI solutions without authorization, as well as adhering to all company policies.
Our Guiding Principles establish guidelines for the responsible and ethical use of AI solutions to enable advancement, support decision-making, and improve productivity and efficiency. These principles are designed to safeguard confidential information, including intellectual property and packaging data. We assess new AI solutions prior to their approval for use within Esko. READ MORE