Security Policy

At Aconit, security is our top priority. We understand the importance of protecting your data and maintaining the confidentiality, integrity, and availability of our platform. This Security Policy outlines the measures we take to ensure the security of our platform and your data.

Data Protection

We implement a variety of security measures to protect your data, including:

• Encryption of data in transit using TLS 1.2+
• Encryption of data at rest using AES-256
• Regular security assessments and penetration testing
• Secure software development practices
• Regular security training for all employees

Access Control

We implement strict access controls to ensure that only authorized personnel have access to your data:

• Role-based access control (RBAC) for all employees
• Multi-factor authentication (MFA) for all employee accounts
• Regular access reviews and audits
• Principle of least privilege for all access grants

Infrastructure Security

Our infrastructure is designed with security in mind:

• Hosted in secure, enterprise-grade data centers
• Network segmentation and firewalls
• Continuous monitoring and logging of all systems
• Regular security patches and updates
• Automated vulnerability scanning

Incident Response

We have a comprehensive incident response plan in place to address any security incidents promptly and effectively:

• 24/7 monitoring for security incidents
• Dedicated incident response team
• Regular incident response drills and tabletop exercises
• Defined procedures for notification and remediation

Compliance

We are committed to adhering to industry-standard security frameworks and regulations. Our security team is actively working toward formal compliance certifications.

Security Awareness

We believe that security is everyone's responsibility. We conduct regular security awareness training for all employees, covering topics such as:

• Phishing and social engineering
• Password security
• Safe internet browsing practices
• Data handling procedures

Vulnerability Disclosure

We welcome security researchers to responsibly disclose any vulnerabilities they discover in our platform. If you believe you have found a security vulnerability, please report it to security@aconit.com. We will investigate all legitimate reports and do our best to quickly fix the problem.

Contact Us

If you have any questions about our security practices, please contact us at security@aconit.com.