Quality and Information Security Policy

Ensure the correct operation and maintenance of .pt, under a technical management based on a stable, secure and reliable service, pursuing a policy of innovation, geared to the needs of the national community, with respect for the law in general, and privacy and personal data protection.

Promote continuously the use of the internet at a national level, providing a service recognized as a reference and excellence by the community, peers and partners.

Within the scope of its operations, the .PT assumes and recognizes the fundamental need to commit to:

Reinforcing its partnership with the registrars, on a technical, legal and administrative level, achieving mutual benefits and, consequently, increasing the sustainable growth of domains registration and increasing the users and community satisfaction;

Promoting customer satisfaction, by providing an efficient and high quality service, based on simplifying and streamlining the registration process and reducing its costs;

Complying with international and national recommendations regarding the registration of domain names, management and maintenance requirements, both at a technical and administrative level. As well as, ensuring the compliance and safeguard of third party rights, particularly in terms of intellectual property;

Ensuring that the daily operations, as well as the long term and medium term plans and strategies, are  compliant with respective legal and regulatory requirements;

Valuing our human capital, by investing in improving employees’ skills, adopting policies that promote innovation, motivation, involvement and commitment to .PT's mission and goals; 

Ensure that networks, systems, technologies that support .PT activity operate with high levels of service and are kept technologically updated, and whenever vulnerabilities are identified, controls are implemented to protect the confidentiality, integrity, availability and privacy of the information;

Ensure that employees, providers and stakeholders are notified to comply with the security and privacy policies and requirements defined by .PT, and properly report any suspicion that the security or privacy of the information has been compromised. The .PT shall report to the relevant authorities high risk security incidents and any breach of personal data;

Ensure that the processing of personal data is carried out in a lawful, equitable, necessary and transparent manner, taking into account the existence of adequate technical and organizational measures to guarantee the authenticity, integrity and privacy of the data being processed, protecting the exercise of legally established rights.

Ensure business continuity by implementing measures to ensure the resilience of .PT against the adversity, and ensure the availability of information according to its typology, value and relevance, thus ensuring the maintenance and recovery of critical activities of the organization in a acceptable timeframe, minimizing the consequences of incidents for its stakeholders.

The .PT guides its operations to ensure its continuous improvement, by reviewing and updating its processes, policy and objectives, in line with international standards ISO 9001:2015 and ISO/IEC 27001:2022.

The .PT is open to communications and will continue to disclose its Policies, both internally and externally, keeping it current and available on its website www.pt.pt.

Lisbon, 20 March 2024