Security Policy

Infrastructure Security

Our servers are hosted in ISO 27001 certified data centers. DDoS protection, firewall, and IDS/IPS systems are active.

Application Security

Regular security scans, code reviews, penetration tests, and OWASP compliance are ensured.

Data Encryption

All data is encrypted with AES-256. TLS 1.3 in transit and at-rest encryption for storage.

Access Control

Role-based authorization (RBAC), two-factor authentication (2FA), and least privilege principle are applied.