Security Policy

Last updated: February 15, 2026

Data protection measures

We use least-privilege principles, environment segmentation, continuous monitoring, and backup controls to protect customer data.

Encryption standards

Data in transit is protected via TLS 1.2+ and sensitive data at rest is encrypted using industry-standard mechanisms.

Infrastructure and access controls

Production access requires role-based permissions and multi-factor authentication, with audit logging for critical actions.

Incident response

We maintain documented procedures for triage, containment, remediation, and post-incident review with continuous improvements.

Vendor and subprocessor posture

Critical vendors undergo security and compliance due diligence with contractual obligations for data handling and incident notification.