Data Protection & Security
A practical overview of security principles and data protection responsibilities.
Data Protection & Security
A practical overview of security principles and data protection responsibilities.
1. Security approach
The service should use secure transport, access controls, least-privilege permissions, protected secrets, dependency updates, backups and monitoring appropriate to its risk. These are implementation objectives, not a claim of independent certification.
2. Access and authentication
Users should protect credentials and enable available account security features. Administrators should grant access only to people who need it and remove access when no longer required.
3. Infrastructure and subprocessors
Hosting, database and payment providers may process information to provide their services. The operator must maintain a current list of providers and review their contractual and security commitments.
4. Data separation
Tenant business records and AYOZRA platform subscription billing are separate systems. Tenant business payment records are informational records; AYOZRA does not process or settle tenant customer payments. Access controls must prevent cross-tenant data exposure.
5. Incident reporting
The operator must maintain an incident response and escalation procedure, including investigation, containment, recovery, evidence preservation and any notifications required by law. A verified security contact must be published before launch.
6. No certification claim
Unless independently assessed and evidenced, AYOZRA does not claim ISO 27001, SOC 2, PCI DSS certification or any other security certification. Payment card processing should be delegated to an appropriately approved payment provider.
Questions about this policy?
If you need clarification or have a concern relating to this document, please contact the AYOZRA team.
Email our teamRLAA Tech, Bonth Chhak, Bhadrak - 756100