Security Policy
Enterprise security standards, infrastructure protections, vulnerability reporting, and responsible disclosure programs.
1. Security Standards & Architecture
InfoSkills Technology mandates rigorous security practices across our cloud architecture, development lifecycle, and employee workflows.
Infrastructure is hosted on SOC 2 Type II certified platforms (Google Cloud, Vercel) featuring continuous automated security audits, vulnerability scanning, and strict IAM access controls.
Key Summary
- TLS 1.3 in-transit and AES-256 at-rest default data encryption.
- Zero-trust access policy with mandatory multi-factor authentication.
2. Vulnerability Reporting & Responsible Disclosure
We welcome security researchers to inspect our public endpoints responsibly.
If you discover a potential vulnerability, please report it immediately to security@infoskillstechnology.com. Include reproducible steps and allow reasonable time for remediation prior to public disclosure.