Section 1
1. Security Commitment
Security considerations are incorporated into platform design, access management, provider selection, monitoring, incident handling, and product changes. Controls are reviewed in light of the data processed and reasonably foreseeable threats.
Section 2
2. Data Protection Measures
Measures may include encrypted network transport, managed storage protections, least-privilege access, environment separation, secure configuration, logging, backups, vulnerability and dependency management, rate limiting, and controls against automated abuse.
Access to private evidence and contact data is restricted according to operational need. Service providers are assessed and contractually required to protect data where appropriate.
Section 3
3. Authentication Security
FYDERIO uses managed authentication and may use phone information to reduce duplicate-account abuse. Contact details are not displayed publicly. Sessions may be revoked when compromise or misuse is suspected.
Never share sign-in links, codes, or account access. Secure the email account and device connected to FYDERIO and use current software and device protections.
Section 4
4. Security Monitoring and Testing
FYDERIO monitors relevant errors, authentication events, abuse indicators, and service health. Security controls may be tested and improved through code review, automated checks, provider assurance, and responsible vulnerability investigation.
Details that would materially weaken security or enable abuse are not publicly disclosed.
Section 5
5. Breach Handling
Suspected incidents are assessed, contained, investigated, documented, and remediated according to their nature and impact. FYDERIO may reset sessions, restrict features, preserve records, or coordinate with service providers and authorities.
Affected people and competent authorities will be notified when and within the time required by applicable law. Notices will describe known impact and practical protective steps where possible.
Section 6
6. User Responsibilities
Users must provide accurate account information, protect access methods, avoid untrusted devices or links, review uploads for personal information, and promptly report suspected account compromise or security weaknesses.
Do not publicly disclose an unremediated vulnerability or access data that is not yours. Make a good-faith report through the contact channel and allow reasonable time for investigation.