Endpoint Protection Policy
linkhaus, LLC · Effective November 4, 2026 · Owner: Company owner · Review: At least annually
This policy establishes operating requirements. Implementation evidence, configuration records, and completed reviews are maintained separately; publication alone is not proof that every control has been implemented or audited.
Scope
This policy applies to company-managed computers and any device authorized to administer Linkhaus or access non-public company data. Managed cloud infrastructure and employee devices require different protection measures; the use of Cloud Run does not remove the need to protect administrative devices.
Malware protection
Authorized devices must run supported anti-malware protection appropriate to their operating system, such as current Apple XProtect on macOS or Microsoft Defender on Windows, or an approved equivalent. Protection and security-definition updates must remain enabled. Scheduled scans must be configured where supported; otherwise the owner must verify the platform's automatic scanning and remediation mechanisms. Protection must not be disabled without a documented exception.
Device hygiene and incidents
Devices must use supported operating systems, timely security updates, disk encryption, screen locking, and restricted administrator access. Software must come from trusted sources. Suspected malware must be reported to shie@linkhaus.ai; affected devices must be isolated from company systems where necessary, investigated, and verified before access is restored.
Cloud workloads and evidence
Google manages the underlying Cloud Run host infrastructure. Linkhaus remains responsible for its application code, dependencies, container images, and permissions, following the Vulnerability Management Procedure. The owner must maintain a device inventory and records of protection status, update checks, and incidents. Checks are required at onboarding, at least quarterly, and after a security event; this page is not a device scan report.
Exceptions require owner approval, documented safeguards, and a review date. Contact: shie@linkhaus.ai.