Security and Compliance

Our security approach

We use technical and organizational measures designed to protect information, including authenticated access, encrypted connections, database access controls, business-level data isolation, data minimization, least-privilege access, auditability, and secure development practices.

No service can guarantee absolute security. Users are responsible for protecting their credentials and limiting submitted information to what is reasonably necessary.

Current safeguards

• Encryption in transit through modern HTTPS connections.
• Uploaded source files are processed transiently and are not retained.
• Authentication and session controls for account access.
• Database access controls and business-level data isolation.
• Restricted internal access based on operational need.
• Dependency review, source control, and deployment controls.
• Evidence-oriented product design with correction and history in mind.
• Incident assessment and communication procedures under development.

Compliance status

ISO 27001 certification and SOC 2 Type II attestation are not currently complete. We are aligning documentation, controls, and evidence toward those goals. We will not describe a certification or attestation as achieved until it is independently completed.

Report a concern

If you believe you found a security issue, email info@bizdaptive.com with a clear description and steps to reproduce. Do not access, alter, or retain data that does not belong to you.