Security
What we do today to protect this website and the information you send us, stated plainly.
Draft
Last updated:
1. What is true today
- The website is served over HTTPS.
- It is hosted on Vercel.
- Form submissions are validated on the server as well as in your browser.
- Forms are protected by Cloudflare Turnstile and rate limiting.
- We never handle payment card data on this website.
- Secrets are held as environment variables, not in the code.
- We collect the least information we need.
2. Certification
We do not currently hold ISO 27001, SOC 2 or Cyber Essentials certification. We will not describe the service as certified unless that changes.
3. If something goes wrong
If a personal data breach occurs that is likely to put people at risk, we intend to tell the ICO within 72 hours where the law requires it, and to tell affected customers without undue delay. [Solicitor to confirm incident wording].
4. Reporting a vulnerability
If you think you have found a security problem, email admin@ikcloudsolutions.com with the details. Please do not access other people’s information while testing.