Security

We take security seriously. This page describes our approach to protecting systems and customer data, including technical and organisational controls.

Infrastructure

Our platform is hosted on modern cloud infrastructure with network segmentation, firewalls, and continuous monitoring. Infrastructure is maintained with secure configurations and automated patching.

Encryption

Data in transit is protected using TLS. Sensitive data at rest is encrypted using industry-standard algorithms. Encryption keys are managed with access controls and rotation policies.

Access Controls

We enforce principle of least privilege, multi-factor authentication for administrative access, and role-based access controls across our systems and third-party services.

Incident Response

We maintain an incident response plan with defined roles, monitoring, and escalation procedures. In case of a security incident we will notify affected customers as required by applicable law.

Third-Party Security

We assess third-party vendors for security practices and maintain contractual safeguards where they process customer data on our behalf.

Contact

To report security issues or request security documentation, email security@yourdomain.com.

Last updated: May 2026