Password Policy

01 Purpose

Big Bull Technologies, LLC (“Big Bull Technologies,” “BBT,” “we,” “our,” or “us”) is committed to protecting Customer accounts through responsible credential management.

This Password Policy describes the principles used by Before the Call (“B4C”) to support secure authentication while maintaining a practical user experience.

This policy should be read together with the Authentication Policy and Multi-Factor Authentication Policy.

02 Password Philosophy

Passwords remain an important component of account security. Before the Call encourages passwords that are:

• Unique
• Difficult to guess
• Used only for one account
• Properly protected by the account owner

As security standards evolve, password requirements may also evolve.

03 Password Requirements

The Before the Call platform may enforce reasonable password requirements designed to protect Customer accounts. Requirements may include factors such as:

• Minimum length
• Character diversity
• Protection against commonly used passwords
• Prevention of compromised passwords
• Other security measures as platform capabilities evolve

Current technical requirements are enforced by the application and may change without requiring updates to this policy.

04 Password Storage

Where passwords are used for authentication, they are protected using industry-accepted cryptographic practices appropriate to the platform.

Big Bull Technologies personnel cannot retrieve or view a user’s password.

05 Password Resets

Users who forget their password may initiate a password reset using supported account recovery methods.

Password reset requests may require verification of account ownership before a new password can be established.

To protect account security, password reset links or verification codes may expire after a limited period.

06 Password Reuse

Authorized Users are strongly encouraged not to reuse passwords across multiple websites or services.

Using a unique password for Before the Call helps reduce the risk of unauthorized access if another service experiences a security incident.

07 Password Sharing

Passwords are personal credentials and should not be shared with:

• Other members
• Department personnel
• Supervisors
• Big Bull Technologies employees
• Contractors
• Third parties

08 Compromised Credentials

If a user believes their password has been compromised, they should:

• Change their password immediately
• Notify their Department Administrator when appropriate
• Review recent account activity
• Report suspected unauthorized access
• Enable Multi-Factor Authentication if available

Big Bull Technologies may require a password reset if there is reason to believe account credentials have been compromised.

09 Password Managers

Big Bull Technologies encourages the use of reputable password managers to generate and securely store unique passwords.

Password managers can help reduce password reuse and improve overall account security.

10 Alternative Authentication

As Before the Call evolves, additional authentication methods may supplement or replace traditional passwords. Examples include:

• Passkeys
• Multi-Factor Authentication
• Security keys
• Enterprise Single Sign-On (SSO)
• Federated identity providers

Future authentication methods will be evaluated based on security, usability, and Customer needs.

11 Department Responsibilities

Departments are responsible for:

• Promptly removing access for users who no longer require an account
• Encouraging responsible credential management
• Reporting suspected account compromise
• Following organizational security procedures

Departments should not request or retain user passwords.

12 Continuous Improvement

Big Bull Technologies regularly reviews authentication and password practices to align with evolving security guidance, platform capabilities, and industry best practices.

Password policies may be updated as new technologies and standards emerge.

13 Changes to This Policy

Big Bull Technologies may update this Password Policy periodically.

Material changes will become effective on the published Effective Date after reasonable notice has been provided through the Services, our website, email, or another appropriate communication method.

14 Contact

Questions regarding password security may be directed to Big Bull Technologies.

Big Bull Technologies, LLC
Email: ashlea@bigbulltech.io

15 Related Documents

• SEC-001 — Authentication Policy
• SEC-003 — Multi-Factor Authentication Policy
• APP-005 — Device Security Policy
• TRU-001 — Security Overview
• TRU-003 — Data Security

16 Revision History