Access control
Access should follow roles and the minimum permissions needed for the work.
SECURITYSecurity should be part of
Security should be part of
the product architecture.
We treat security as an engineering and operational responsibility. This page describes the principles we design toward; it does not claim certifications we have not earned.
Data separation
Customer and company data should remain logically separated across the product architecture.
Encrypted transport
Connections should use modern encrypted transport wherever data moves across networks.
Operational logging
Important system actions and failures should be observable so issues can be investigated.
Backups & recovery
Recovery planning should reduce the impact of accidental loss or service problems.
Responsible disclosure
Security concerns can be reported directly so they can be reviewed and handled responsibly.
REPORT A SECURITY CONCERN
Found something we should review?
Send the details to our contact email with “Security” in the subject. Please avoid accessing or changing data that does not belong to you.
hello@xzade.com ↗