1. Introduction
At BoardBreeze, we take the security of our users' data and our platform very seriously. This security policy outlines our commitment to protecting your information and the measures we take to ensure a secure environment.
2. Reporting Security Vulnerabilities
We appreciate the efforts of security researchers and users in reporting security vulnerabilities to us. If you believe you've found a security vulnerability in our services, we encourage you to report it to us as soon as possible.
To report a security vulnerability, please email help@magneosolutions.com with the following information:
- A detailed description of the vulnerability
- Steps to reproduce the issue
- Any potential impact of the vulnerability
- Any suggestions for mitigating the vulnerability
We commit to:
- Acknowledging receipt of your vulnerability report within 48 hours
- Providing an initial assessment of the report within 5 business days
- Keeping you informed about our progress in addressing the vulnerability
- Notifying you when the vulnerability has been fixed
3. Security Measures
BoardBreeze implements the following security measures to protect your data:
- Data Encryption: All data in transit is encrypted using TLS/SSL. Sensitive data at rest is encrypted using industry-standard encryption methods.
- Authentication: We use secure authentication mechanisms and enforce strong password policies.
- Access Controls: We implement strict access controls to ensure that only authorized personnel can access sensitive data.
- Regular Security Audits: We conduct regular security audits and vulnerability assessments to identify and address potential security issues.
- Security Headers: We implement security headers to protect against common web vulnerabilities such as XSS, clickjacking, and MIME type sniffing.
- Secure Development Practices: We follow secure coding practices and conduct code reviews to identify and fix security issues early in the development process.
4. Data Breach Response
In the event of a data breach, we will:
- Promptly investigate the breach and take steps to contain and mitigate the impact
- Notify affected users as required by applicable laws and regulations
- Work with law enforcement and security experts as necessary
- Take steps to prevent similar breaches in the future
5. User Responsibilities
While we take extensive measures to protect your data, security is a shared responsibility. We encourage users to:
- Use strong, unique passwords for your BoardBreeze account
- Keep your login credentials confidential
- Be vigilant about phishing attempts and suspicious communications
- Keep your devices and software up to date with the latest security patches
- Log out of your account when using shared or public computers
- Report any suspicious activities or potential security issues to us immediately
6. Changes to This Policy
We may update this security policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify users of any material changes to this policy.
7. Contact Us
If you have any questions about our security practices or this policy, please contact us at help@magneosolutions.com.