Access Control Policy

Document status: working legal template. Before publication, fill in the details, verify the actual service architecture, and have the text reviewed by a lawyer practicing in the Republic of Uzbekistan.

Service owner: [LEGAL ENTITY NAME], TIN [TIN], address: [ADDRESS].
Service: Belgi.ai, [DOMAIN].
Version: [VERSION NUMBER] dated [DATE].
Contacts: [EMAIL], [PHONE].

Access is granted on the principles of least privilege, need-to-know and segregation of duties. Roles: support user, analyst, applications specialist, finance staff, administrator and system operator. A permissions matrix is approved for each role.

An access request states the system, role, justification, period and data owner approval. Privileged accounts use multi-factor authentication; shared accounts are prohibited. Administrator actions are logged. Access is reviewed quarterly, on employee transfer and is terminated no later than [PERIOD] after dismissal or end of contract. Emergency access is time-limited, requires separate approval and a subsequent review.