Security Policy
Last updated: January 15, 2024
At SiteTo.App, we take the security of your data and our platform very seriously. This Security Policy outlines the measures we take to protect your information and ensure the integrity of our services.
Data Protection
We implement multiple layers of security to protect your personal data and the content you convert through our platform.
Secure Connections
All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols.
Vulnerability Management
We regularly conduct security assessments and promptly address any vulnerabilities identified.
Data Storage Security
We store your data in secure cloud environments with multiple layers of protection:
- All stored data is encrypted at rest using AES-256 encryption.
- Access to our production environment is strictly controlled and limited to authorized personnel.
- We implement network segmentation and firewalls to protect against unauthorized access.
- Regular security audits and penetration testing are conducted to identify and address potential vulnerabilities.
Authentication & Access Controls
We implement strict access controls to protect your account:
- Password policies that enforce strong, complex passwords.
- Multi-factor authentication (MFA) support for account access.
- Secure session management with automatic timeouts for inactive sessions.
- Regular review and audit of access permissions across our organization.
Incident Response
In the event of a security incident, we have a comprehensive response plan in place:
- Immediate investigation and containment of the incident.
- Assessment of the impact and scope of the incident.
- Timely notification to affected users in accordance with applicable laws and regulations.
- Implementation of corrective measures to prevent similar incidents in the future.
Security Vulnerability Reporting
We encourage responsible disclosure of security vulnerabilities. If you discover a security issue with our platform, please report it to us immediately at security@siteto.app. We commit to:
- Acknowledging your report within 48 hours.
- Providing regular updates about our progress in addressing the issue.
- Taking appropriate steps to fix verified vulnerabilities in a timely manner.
- Recognizing your contribution to our security, with your permission.
Contact Us
If you have questions about our security practices or need to report a security issue, please contact us at:
SiteTo.App Security Team
Email: security@siteto.app
For urgent security matters, please include "URGENT" in the subject line.