At Merkensoft, protecting your data is a top priority. This page outlines the measures we take to keep your information safe and how you can report a potential security issue.
1. Infrastructure Security
Our Services are hosted on infrastructure provided by [Your Hosting Provider, e.g., AWS/Google Cloud/Azure], which maintains industry-standard physical and network security certifications.
Data in transit is encrypted using TLS/SSL ([1.2/1.3]).
Data at rest is encrypted using [AES-256 or your standard].
We use firewalls, intrusion detection, and network segmentation to limit access to production systems.
2. Application Security
We follow secure development practices, including code review and dependency vulnerability scanning.
We perform regular security testing, including [penetration testing / vulnerability scanning], at least [annually/quarterly].
Access to production systems is restricted on a least-privilege basis and requires multi-factor authentication.
3. Data Protection
We maintain regular, encrypted backups of critical data.
We maintain a documented incident response plan to detect, contain, and remediate potential security incidents.
Employee access to customer data is limited to what’s necessary to perform their job duties.
4. Account Security
We encourage you to help keep your account secure by:
Using a strong, unique password
Enabling two-factor authentication (2FA), if available
Not sharing your login credentials with others
Logging out of shared or public devices
5. Compliance
Merkensoft is SOC 2 Type II compliant, reflecting our ongoing commitment to security, availability, and confidentiality controls. [Add any additional certifications, e.g. GDPR, ISO 27001, or “currently working toward X” here.]
6. Reporting a Security Vulnerability
If you believe you’ve discovered a security vulnerability in our Services, please report it to us responsibly. We ask that you:
Provide enough detail for us to reproduce the issue
Avoid accessing, modifying, or deleting data that isn’t yours
Give us reasonable time to investigate and address the issue before public disclosure
Report vulnerabilities to: merkensoft@gmail.com
7. Contact Us
For general security questions, please contact us at:
