Security Policy

1. Introduction

Denkora is committed to protecting the security of User data and the integrity of the Platform. This Policy describes our security practices at a high level and our responsible disclosure process.

2. Security Measures

Denkora implements technical and organizational measures that may include:

• Encryption of data in transit (e.g., TLS/HTTPS) and at rest, where applicable
• Access controls and role-based permissions for internal systems
• Regular security assessments and vulnerability management
• Secure authentication mechanisms, including support for strong password policies and, where available, multi-factor authentication
• Monitoring and logging for anomalous or unauthorized activity
• Vendor and Third-Party Service security review as part of our integration process

3. Shared Responsibility

Security is a shared responsibility. Users are responsible for:

• Maintaining the confidentiality of their login credentials
• Using strong, unique passwords and enabling available security features (e.g., multi-factor authentication)
• Promptly reporting suspected unauthorized access to their Account
• Keeping their devices and browsers secure and up to date

4. Responsible Disclosure

If you discover a potential security vulnerability in Denkora's Services, please report it responsibly to [email protected]. We ask that you:

• Provide sufficient detail to reproduce the issue
• Avoid accessing, modifying, or deleting data beyond what is necessary to demonstrate the vulnerability
• Avoid public disclosure until we have had a reasonable opportunity to investigate and remediate
• Not use the vulnerability for any unauthorized purpose

Denkora will acknowledge valid reports and work to remediate confirmed vulnerabilities in a reasonable timeframe.

5. Data Breach Response

In the event of a Personal Data breach, Denkora will follow its incident response procedures and, where required by law, notify affected Users and relevant regulatory authorities within applicable timeframes, as described in our GDPR Policy.

6. No Absolute Guarantee

No system can be guaranteed 100% secure. While Denkora takes reasonable and industry-standard measures to protect data, we cannot guarantee absolute security against all threats.

7. Third-Party Services

Denkora integrates with reputable Third-Party Services (e.g., AWS, Azure, Google Cloud) that maintain their own security certifications and practices. Denkora conducts reasonable diligence on such providers but is not responsible for security incidents originating solely from third-party infrastructure outside our control.

8. Changes to This Policy

We may update this Policy periodically to reflect evolving security practices. Material changes will be communicated via the Platform.

9. Contact Information

Denkora — Security Team
Email: [email protected]
Website: www.denkora.com