Information Security Policy

We use encryption in transit, least-privilege access controls, network segmentation, continuous monitoring, and regular patching across our infrastructure.

Access to production is logged and reviewed, backups are encrypted and tested, and staff complete security training.

We maintain an incident-response process and will notify affected customers and authorities as required by law in the event of a breach.