1. Security Philosophy
At Digital Footprint Private Limited, information security and privacy-by-design are fundamental tenets of our engineering culture. We treat client audit data, business assets, and personal information with utmost diligence, employing defense-in-depth methodologies.
2. Technical & Infrastructure Safeguards
Encryption Standards
All browser communications are strictly enforced via HTTPS/TLS 1.3 with HSTS enabled. Data at rest is encrypted using AES-256 in hardened cloud regions.
Access Controls
Strict Principle of Least Privilege (PoLP) and Multi-Factor Authentication (MFA) govern administrative access to hosting, database, and repository tools.
3. Responsible Vulnerability Disclosure Program
We appreciate the invaluable contributions of the independent security research community. If you identify a potential security vulnerability in our public web properties, we request that you disclose it to us privately and responsibly before publishing.
Ground Rules for Ethical Research:
- Do not access, modify, or destroy data belonging to other users or clients.
- Do not execute Denial of Service (DoS/DDoS) attacks, automated fuzzing, or spamming against form endpoints.
- Do not test or probe client production websites or third-party platforms.
- Allow us a reasonable window of 30 days to remediate the vulnerability before public disclosure.
4. Good-Faith Safe Harbor
If you conduct vulnerability research in good faith and in full compliance with these guidelines, Digital Footprint Private Limited considers your activity authorized under Indian law (including the Information Technology Act, 2000). We will not initiate or support civil or criminal legal proceedings against researchers acting within these terms.
5. How to Report a Vulnerability
Please send an encrypted or direct email to our security engineering team:
Security Desk: security@digitalfootprint.agency
Response Timeline: Initial triage & acknowledgement within 48 hours.
Machine-Readable File: /.well-known/security.txt