Security

1. Security Overview

We implement administrative, technical, and physical safeguards designed to protect data from unauthorized access, disclosure, alteration, or destruction.

2. Data Protection

• We use industry-standard encryption for data in transit (TLS).
• Where supported, data at rest is protected using encryption and access controls.
• We limit data access to authorized personnel with a business need to know.

3. Access Controls

• We follow the principle of least privilege.
• Access is reviewed and updated as roles change.
• We encourage strong authentication measures where available.

4. Monitoring and Incident Response

We monitor our systems for suspicious activity and maintain procedures to investigate, contain, and remediate security incidents.

5. Third-Party Risk Management

We evaluate third-party vendors that process or store data on our behalf and require appropriate security safeguards.

6. Your Role in Security

• Use a strong, unique password for your account.
• Keep your login credentials confidential.
• Notify us promptly if you suspect unauthorized access.

7. Report a Vulnerability

If you believe you have discovered a security vulnerability, please contact us at [email protected] with details to help us investigate.

8. Updates

We may update this Security page as our practices evolve. Any changes will be posted here with a revised "Last Updated" date.