Risk Management Policy

The purpose of this policy is to set a consistent framework for managing risks across all functions of APEX ECOM SOLUTION, including marketplace operations, advertising, catalog management, technology use, vendor management, financial controls, human resources and client communication.

This policy applies to all employees, contractors, interns and authorized vendors who access client data, marketplace accounts or company systems.

We classify risks into the following primary categories:

• Operational risk — errors in listing uploads, ad management, inventory operations or reporting.
• Compliance risk — violations of marketplace policies, GST regulations, IP rules or category-specific laws.
• Information security risk — unauthorized access, credential leaks, account takeovers or data loss.
• Financial risk — pricing errors, ad budget overruns, invoice disputes and payment fraud.
• Reputational risk — issues that may impact client trust, marketplace standing or APEX's professional reputation.
• Continuity risk — service interruptions caused by people, technology or infrastructure failures.

Risks are assessed using two dimensions:

• Likelihood — how probable the risk is to materialize (rare, possible, likely, almost certain).
• Impact — the severity of consequences on the client or APEX (low, moderate, high, critical).

Risks rated high or critical receive priority treatment and are tracked until reduced to an acceptable level.

We apply layered controls to reduce the likelihood and impact of identified risks, including:

• Role-based, least-privilege access on marketplace panels and internal tools.
• Multi-factor authentication on systems and panels wherever supported.
• Standard operating procedures and checklists for catalog uploads, price changes and ad launches.
• Maker-checker review for high-impact actions such as bulk price updates, large ad budget changes and category submissions.
• Vendor due diligence for any tool or third party that processes client data.
• Periodic training on marketplace policies, intellectual property rules and information security.
• Strict NDAs and confidentiality agreements with employees and contractors.
• Regular backup of internal records and credentials inventories.

For Amazon, Flipkart, Meesho and other marketplaces, we additionally:

• Operate strictly under sub-user permissions invited by the client.
• Avoid storing master seller credentials wherever the marketplace supports invited access.
• Track account health daily and escalate negative trends immediately.
• Maintain version notes on important changes for traceability.

Risks and incidents are tracked through internal registers and reviewed by the leadership team on a periodic basis. Material risks or incidents impacting a client are communicated to the client's designated point of contact in a timely manner along with the proposed remediation plan.

The leadership team at APEX ECOM SOLUTION owns this policy. Account managers are responsible for identifying risks within their client portfolios and escalating to leadership when thresholds are crossed. All staff are responsible for following defined procedures and reporting any potential risk or incident promptly.

This Risk Management Policy is reviewed at least once every twelve (12) months and whenever a material change occurs in our services, technology stack, regulatory environment or marketplace landscape.

For any risk or compliance concern relating to APEX ECOM SOLUTION's services, please contact info.apexecomsolution@gmail.com.