GENERAL FRAMEWORK OF THE INTEGRATED MANAGEMENT SYSTEM (IMS)
GuruSoft, as a company dedicated to the development of technological solutions, establishes an Integrated Management System (IMS) that integrates information security and quality management, as a framework to effectively direct and control its processes and services.
IMS is based on information protection, service quality, and customer satisfaction, aligned with the organizational context, stakeholder needs, and the organization’s strategic objectives.
In this sense, GuruSoft establishes the following guidelines for IMS management:
• Information security risks and business risks and opportunities are continuously identified, analyzed, and addressed, keeping them at acceptable levels.
• The objectives of the Integrated Management System are established, implemented and periodically reviewed, in line with this policy.
• Training, awareness and organizational culture in terms of quality and information security are promoted.
• Applicable legal, regulatory and contractual requirements, including those related to the protection of personal data, are identified and complied with.
• The protection of information assets is guaranteed, ensuring confidentiality, integrity and availability.
• Business continuity strategies are established and maintained, to ensure the availability of services.
• The continuous improvement of the IMS is promoted, through audits, indicators, reviews by the Management and management of corrective actions.
The scope and objectives of the Integrated Management System are defined in the following documents:
GS-SIG-DI017 – Scope of the Integrated Management System
GS-SIG-DI006 – Objectives of the Integrated Management System

INFORMATION SECURITY POLICY

GuruSoft, as a company dedicated to the development of technological solutions, aims to offer reliable, innovative and secure services, serving the needs of its customers with high standards of quality, compliance and information protection.
Considering this, information security is a fundamental pillar to guarantee the trust of our customers, alliances and stakeholders; therefore, the company establishes, implements, maintains and improves an Information Security Management System (ISMS), in order to:
• Protect the confidentiality, integrity, and availability of information.
• Promote a culture of safety and good practices among all employees and other parties involved.
• Prevent and manage information security risks
• Ensure continuity of service.
• Ensure compliance with applicable legal, regulatory, and contractual requirements

QUALITY POLICY

GuruSoft is committed to designing, developing, operating, and continuously improving the e-invoicing service, ensuring that it meets the client’s requirements, applicable legal and contractual requirements, and quality standards defined by the organization.
Quality management is a strategic element for:
• Increase customer satisfaction.
• Ensure service availability and reliability.
• Improve process efficiency.
• Strengthen GuruSoft’s reputation and positioning in the market.

PERSONAL DATA PROTECTION POLICY

GURUSOFT OMAN
Last Updated: 05-20-2026

1. COMPANY INFORMATION

GuruSoft Oman is a company duly incorporated under the laws of the Sultanate of Oman, engaged in the provision of electronic invoicing, Software as a Service (SaaS), cloud-based technological solutions, electronic document exchange, ERP integrations, digital transformation services, and related technology services.

GuruSoft processes personal data in connection with the provision of electronic invoicing and technology services in compliance with applicable data protection and cybersecurity regulations.

2. PURPOSE

This Personal Data Protection Policy establishes the principles governing the collection, use, storage, transfer, disclosure, and protection of personal data processed by GuruSoft.

3. PERSONAL DATA PROCESSED

GuruSoft may process:

· Identification data

· Contact information

· Corporate and tax information

· Electronic invoicing data

· Technical and transactional records

· User access logs

· IP addresses and system metadata

4. PURPOSES OF PROCESSING

Personal data may be processed for:

· Provision of electronic invoicing services

· SaaS platform operation

· Customer support and technical assistance

· Compliance with legal and tax obligations

· Fraud prevention and cybersecurity monitoring

· Service improvements and operational analytics

5. LEGAL BASIS

GuruSoft processes personal data based on:

· Contractual necessity

· Compliance with legal obligations

· Legitimate business interests

· Consent, where required by applicable law

6. DATA SECURITY

GuruSoft implements reasonable technical, organizational, and administrative safeguards designed to protect personal data against unauthorized access, disclosure, alteration, destruction, or misuse, including:

· Access controls

· Encryption mechanisms

· Secure cloud infrastructure

· Monitoring and logging controls

· Information security policies aligned with ISO/IEC 27001 standards

7. INTERNATIONAL DATA TRANSFERS

Personal data may be processed or stored in cloud infrastructures and service environments located outside the Sultanate of Oman, subject to appropriate contractual and security safeguards.

8. DATA SUBJECT RIGHTS

Where applicable under law, data subjects may request:

· Access to personal data

· Correction of inaccurate data

· Deletion of personal data

· Restriction or objection to processing

· Withdrawal of consent where processing is consent-based Requests may be submitted to: privacy.om@guru-soft.com

9. RETENTION

Personal data shall be retained only for the period necessary to fulfill legal, contractual, tax, operational, and regulatory obligations.

10. GOVERNING LAW

This Policy shall be governed by the laws and regulations of the Sultanate of Oman, including the Oman Personal Data Protection Law (Royal Decree 6/2022), where applicable.

PRIVACY NOTICE

GURUSOFT OMAN
Last Updated: 05-20-2026

1. WHO WE ARE

GuruSoft Oman is a technology company providing electronic invoicing, SaaS, ERP integration, cloud, and digital transaction services.

Email: privacy.om@guru-soft.com

2. PERSONAL DATA WE COLLECT

We may collect:

· Identification data

· Contact details

· Tax and invoicing information

· System access logs

· Technical and transactional information

· Communications submitted through forms or support channels

3. PURPOSE OF PROCESSING

Your personal data may be processed for:

· Provision of electronic invoicing services

· SaaS platform administration

· Customer support

· Regulatory compliance

· Cybersecurity and fraud prevention

· Service improvements

4. LEGAL BASIS

We process personal data based on:

· Contractual necessity

· Legal obligations

· Legitimate interests

· Consent where required

5. INTERNATIONAL TRANSFERS

Your data may be processed in cloud infrastructures located outside Oman, subject to reasonable security safeguards.

6. YOUR RIGHTS

Where applicable, you may request:

· Access

· Correction

· Deletion

· Restriction of processing

· Withdrawal of consent Requests: privacy.om@guru-soft.com

7. DATA SECURITY

GuruSoft implements reasonable technical and organizational security measures aligned with industry best practices and ISO/IEC 27001 principles.

MANAGEMENT SYSTEM
GURUSOFT WEBSITE COOKIE POLICY
Code: GS-SIG-PO020
Version: 001
Type Doc.: Policy
Date: 2026-05-21
Classification: Public
Page 1 of 4

Read more