Does the vendor follow an established security framework?

Yes. evasys operates an ISO/IEC 27001:2022-based information security management system.