start portlet menu bar end portlet menu bar

Foundational Pillars

Security

  • Data Encryption: Data is consistently protected in transit using secure protocols (such as TLS) and encrypted at rest using strong, industry-standard or cloud-native mechanisms.
  • Identity & Access Management (IAM): Secure access is enforced across the portfolio through Role-Based Access Controls (RBAC), least-privilege policies, and integration with enterprise Single Sign-On (SSO) or federated identity providers.
  • Secure Development Lifecycle (SDLC): Security is deeply embedded throughout the product lifecycle, incorporating practices like threat modeling, automated security testing, and secure design reviews.
  • Incident Response: Vulnerabilities and security events across all products are centrally managed through the HCLSoftware Product Security Incident Response Team (PSIRT) for coordinated tracking and remediation

Compliance

  • Enterprise Standards Alignment: Security and risk governance operate under HCLSoftware’s enterprise Information Security Management System (ISMS) and align with globally established Governance, Risk, and Compliance (GRC) frameworks.
  • Continuous Governance: Products maintain continuous risk monitoring, control mapping, and regular security assessments to support operational reliability and global compliance requirements.

Privacy & Data Handling

  • Privacy by Design & Default: Privacy principles and data protection safeguards are embedded directly into the architecture, development, and standard operations of all platforms by default.
  • Data Roles & Responsibilities: Across all products, customers act as the data controllers, retaining full ownership and control of their data. HCLSoftware operates strictly as the data processor fulfilling contractual obligations.
  • Data Minimization: Platforms are explicitly designed to process only the data required for intended functionality and service delivery, avoiding the collection or processing of special sensitive personal data categories.

Responsible AI

AI powers many capabilities across the AI & IO ecosystem, but always with oversight, transparency, and accountability.

Note: This section applies specifically to the products in the portfolio that utilize AI capabilities, such as HCL BigFix AEX, HCL AION, HCL BigFix Service Management, HCL IEM, HCL MyXalytics, HCL Runbook AI, and HCL iControl

  • Ethical Principles & Governance: Where AI is utilized, capabilities operate within clearly defined boundaries and are governed by HCLSoftware’s ethical AI guidelines and enterprise risk management practices.
  • Human Oversight & Accountability: AI is used in an assistive manner to support insights and automation. Critical workflows and high-impact actions rely on human-in-the-loop validation to ensure accountability.
  • Transparent & Secure Processing: AI features respect privacy-by-design principles. Customer data used in AI processes is handled with strict data protection controls, minimization, and transparency to ensure explainable and reliable outputs

Foundational Pillars

Data encryption

Data is consistently protected in transit using secure protocols (such as TLS) and encrypted at rest using strong, industry-standard or cloud native mechanisms.

Identity & access management

Secure access is enforced across the portfolio through Role-Based Access Controls (RBAC), least-privilege policies and integration with enterprise Single Sign-On (SSO) or federated identity providers.

Secure Development Lifecycle (SDLC)

Security is deeply embedded throughout the product lifecycle, incorporating practices like threat modeling, automated security testing and secure design reviews.

Incident Response

Vulnerabilities and security events across all products are centrally managed through the HCLSoftware Product Security Incident Response Team (PSIRT) for coordinated tracking and remediation.

Enterprise Standards Alignment

Security and risk governance operate under HCLSoftware’s enterprise Information Security Management System (ISMS) and align with globally established Governance, Risk and Compliance (GRC) frameworks.

Continuous Governance

Products maintain continuous risk monitoring, control mapping and regular security assessments to support operational reliability and global compliance requirements.

Privacy by design & default

Privacy principles and data protection safeguards are embedded directly into the architecture, development, and standard operations of all platforms by default.

Data roles & responsibilities

Across all products, customers act as the data controllers, retaining full ownership and control of their data. HCLSoftware operates strictly as the data processor, fulfilling contractual obligations.

Data minimization

Platforms are explicitly designed to process only the data required for intended functionality and service delivery, avoiding the collection or processing of special sensitive personal data categories.

AI powers many capabilities across the AI & IO ecosystem, but always with oversight, transparency and accountability.

Note: This section applies specifically to the products in the portfolio that utilize AI capabilities, such as HCL BigFix AEX, HCL AION, HCL BigFix Service Management, HCL IEM, HCL MyXalytics, HCL Runbook AI, and HCL iControl

Ethical principles & governance

Where AI is utilized, capabilities operate within clearly defined boundaries and are governed by HCLSoftware’s ethical AI guidelines and enterprise risk management practices.

Human oversight & accountability

AI is used in an assistive manner to support insights and automation. Critical workflows and high-impact actions rely on human-in-the-loop validation to ensure accountability.

Transparent & Secure Processing

AI features respect privacy-by-design principles. Customer data used in AI processes is handled with strict data protection controls, minimization, and transparency to ensure explainable and reliable outputs.

Trust by Products

Endpoint Security Proven Through Independent Certification

HCL BigFix is tested and certified by experts. See the standards it holds and what that means for your endpoints.

HCL BigFix

Where Runbook Automation Meets Responsible AI

AI resolves issues faster, but a human still reviews what matters most. Here's how we keep automation both fast and accountable.

HCL BigFix Runbook AI

Hybrid Cloud Management You Can Trust

Your cloud environments stay protected from initial setup all the way through teardown. See how we keep hybrid infrastructure secure, resilient, and available.

HCL BigFix Cloud Lifecycle Management

Agentic AI, Governed From the Ground Up

HCL AEX acts on its own to resolve IT issues, but only within clearly defined guardrails. Here's how we keep autonomous AI accountable and safe.

HCL BigFix AEX

Service Management Grounded in Security and Accountability

Every ticket and workflow runs through the same security standards your team already knows and trusts. See exactly what backs that up.

HCL BigFix Service Management

Observability Without Requiring Your Sensitive Data

HCL iControl doesn't require sensitive data to function. You control what's ingested and retained, and it runs entirely inside your own managed environment.

HCL iControl

Real-Time Event Intelligence With Human Oversight

HCL IEM watches your IT environment around the clock, but humans stay in the loop on every AI-driven decision. See how.

HCL intelliOps Event Management (IEM)

Full-Stack Visibility, Independently Audited and Formally Certified

HCL iObserve holds industry certifications,validated through regular penetration testing and independent audits. See the full details behind that assurance.

HCL iObserve

Analytics Insights That Stay Within Bounds

HCL MyXalytics uses AI purposefully,focused on summarizing and analyzing your data within clearly defined limits. See exactly where those boundaries sit and why.

HCL MyXalytics