Security Policy & Standards
Enterprise security standards, cloud infrastructure hardening, data encryption, and vulnerability disclosure programs.
1. Security Standards & Architecture
INFOSKILLS TECHNOLOGY PVT LTD enforces strict security standards across our cloud architecture, engineering pipelines, and employee devices.
Infrastructure is hosted on SOC 2 Type II and ISO 27001 certified data centers (Google Cloud, AWS, Vercel, Cloudflare) with automated vulnerability scanning and strict IAM isolation.
Key Summary
- Default TLS 1.3 in-transit and AES-256 GCM at-rest encryption.
- Zero-trust access control with mandatory multi-factor authentication (MFA).
2. Vulnerability Reporting & Responsible Disclosure
We welcome security researchers to test our public endpoints responsibly.
Please report potential vulnerabilities to security@infoskillstechnology.com. Provide reproducible steps and allow reasonable time for remediation prior to public disclosure.