Governing the Use of Company Assets and Information Security | Effective Date: February 5, 2026
This Information Technology Compliance and Cybersecurity Policy ("Policy") has been established by Darkstone Arabia Ltd. ("Company") to ensure the secure, appropriate, and authorized use of all Company-owned information technology assets. This Policy applies to all employees, contractors, consultants, and any individual granted access to Company devices, networks, systems, or data, without exception.
The purpose of this Policy is to protect the Company's intellectual property, confidential information, and technology infrastructure from unauthorized access, data breaches, cybersecurity threats, and misuse. All users are required to comply with these provisions as a condition of employment and continued access to Company resources.
All software applications installed on Company devices must be pre-approved by the IT & Cybersecurity Department. Employees are strictly prohibited from downloading, installing, or activating any unauthorized applications, regardless of perceived urgency or business need.
Any request for software installation or activation must be submitted in writing to the IT & Cybersecurity Department via email at technical@darkstone.com.sa with the following information:
The IT & Cybersecurity Department will evaluate all software requests and provide a response within a maximum of three (3) business days. The Department reserves the right to approve or decline any request based on security assessment, licensing compliance, and business necessity.
Employees are expressly prohibited from transferring, sharing, or storing any Company confidential data, proprietary information, or work-related files using the following methods or platforms:
All file sharing, collaboration, and data storage must be conducted exclusively through the Company's authorized cloud platform: cloud.darkstone.com.sa. This platform ensures proper encryption, access control, audit trails, and compliance with Company security standards.
Company devices, including laptops, desktops, and mobile devices, are provided solely for business purposes. Employees shall not store personal data, install personal applications, or use Company devices for personal activities. Any such usage constitutes a violation of this Policy and may result in disciplinary action.
Darkstone Arabia Ltd. operates under two official email domains:
Employees must exercise extreme caution regarding any email communications that appear suspicious, even if they claim to originate from Company executives or departments. Any email received from domains other than the two official Company domains, requesting urgent action, link clicks, file downloads, or credential verification, must be treated as potentially malicious.
In the event of Microsoft Outlook connectivity issues or performance degradation, employees may access their email through the authorized web portal: webmail.darkstone.com.sa
Employees are prohibited from forwarding Company emails, sharing meeting links, or transmitting any business-related information to personal email accounts (including Gmail, Yahoo, etc.) or previous employer email addresses without explicit written permission or acknowledgment from the IT & Cybersecurity Department.
All legitimate SMS communications from Darkstone Arabia Ltd., including seasonal messages, urgent notifications, incident alerts, and transactional messages, will be delivered exclusively from the sender name: DARKSTONE
Any SMS messages claiming to be from the Company but originating from a different sender name, unknown numbers, or requesting sensitive information should be considered suspicious. Employees should ignore, delete, and report such messages to the IT & Cybersecurity Department.
The IT & Cybersecurity Department conducts regular security audits on a weekly and monthly basis to ensure compliance with this Policy and to identify potential security vulnerabilities. These audits may be scheduled or unscheduled at the sole discretion of the Department.
The IT & Cybersecurity team is authorized to remotely access any Company device for audit, maintenance, or security assessment purposes. While the team will provide temporary notification when feasible, access may be conducted without a formal proposal or advance request in situations requiring immediate attention.
Employees must provide full and immediate cooperation during all cybersecurity audits and investigations. Temporary inconvenience to work activities does not constitute grounds for delaying or obstructing audit procedures.
All data, files, communications, and information created, stored, transmitted, or accessed using Company devices, networks, or accounts (including but not limited to emails, documents, cloud storage, and local files) are the exclusive property of Darkstone Arabia Ltd.
The Company reserves the unconditional right to access, review, download, analyze, and retain any and all data stored on Company devices or systems for investigation, security, compliance, or legal purposes. This right extends to all devices and accounts, including:
The IT & Cybersecurity Department has the authority to conduct investigations at any organizational level, from board members to managers to individual employees. No position, title, or seniority grants exemption from this Policy.
All employees must provide complete and truthful cooperation during security investigations. This includes:
Violations of this IT Compliance & Cybersecurity Policy will be taken seriously and may result in disciplinary actions including, but not limited to:
The severity of consequences will be determined based on the nature, intent, and impact of the violation.
Darkstone Arabia Ltd. reserves the right to modify, update, or amend this Policy at any time to address evolving security threats, regulatory requirements, or business needs. Employees will be notified of significant changes and will be required to acknowledge and comply with updated versions of this Policy.
For questions, concerns, or to report security incidents, please contact the IT & Cybersecurity Department:
Email: technical@darkstone.com.sa
Website: www.darkstone.com.sa
Cloud Platform: cloud.darkstone.com.sa
Webmail Portal: webmail.darkstone.com.sa
I hereby acknowledge that I have read, understood, and agree to comply with all provisions of the Darkstone Arabia Ltd. Information Technology Compliance & Cybersecurity Policy. I understand that violation of this Policy may result in disciplinary action up to and including termination of employment. I acknowledge that all data on Company devices is the property of Darkstone Arabia Ltd. and that the Company has the right to access, review, and investigate such data at any time.