Security

Security overview

Security is part of how we deliver software: least-privilege access, encryption in transit for production systems, reviewed tooling, and prompt escalation when something looks wrong. No online service is perfectly secure; we combine prevention, monitoring, and response appropriate to the risk of each engagement.

Data protection measures

• Role-based access to repositories, cloud, and collaboration tools.
• Multi-factor authentication on sensitive accounts where supported.
• Confidentiality training and contractual duties for personnel and subcontractors.
• Data minimisation in sales and delivery (collect only what we need).
• Alignment with our Privacy Policy and applicable data-protection law.

Access controls

Access to client environments is granted only for named individuals who need it for the SOW. We revoke access when roles change or engagements end. Shared credentials are discouraged; prefer individual accounts and audit logs where your platform supports them.

Encryption practices

We use TLS for data in transit to our website and standard cloud services. Data at rest depends on the platforms you choose (for example cloud provider encryption on volumes and object storage). Specific encryption requirements can be documented in your SOW or DPA.

Backups

Backup and disaster recovery for production systems are normally your responsibility unless the SOW assigns them to us. We recommend documented backup schedules, tested restores, and separation of production and non-production data. We can implement backup-related tasks when explicitly in scope.

Incident response

If we suspect a security incident affecting client data or systems we touch, we aim to notify you without undue delay and cooperate on containment and remediation, subject to law and contract. Report suspected issues to us immediately using the contact below.

Vulnerability reporting

If you believe you have found a vulnerability in a Clykur-operated property (website or agreed product surface), please report it responsibly. Email info@clykur.com with subject "Security inquiry", include reproduction steps and impact, and allow reasonable time to investigate before public disclosure.

Do not access data that is not yours, degrade service, or violate applicable law while testing.

Contact security team

Security and incident reports: info@clykur.com. Phone: 8179299096.

For data-processing terms, see our Compliance page (DPA available upon request).