Our new startup is required to jump through hoops in order to get authorization to use Experian. We are working out of WeWork (shared space). No experian data is stored on our local machines.
We do have a web application server and a database on AWS.
They are asking for our "Information Security Policy". What should be the scope of that? IS there any template we can use that'll satisfy them?