Security Architecture & Data Protection Policy
DigiWorku Security Policy. Our SSL/TLS encryption, cloud security architecture, access controls, and data protection measures.
How DigiWorku Protects Your Data
DigiWorku implements enterprise-grade security measures to protect all client data, project files, communications, and payment information handled through our platform.
All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256 encryption on Supabase's managed PostgreSQL infrastructure hosted on AWS. Admin access to production databases requires multi-factor authentication and is logged for audit purposes.
Our platform follows OWASP Top 10 security guidelines including input validation, prepared SQL statements to prevent injection attacks, CSRF token protection, and CSP headers on all pages. Regular vulnerability scans and penetration tests are conducted quarterly.
Security incidents are investigated and reported to affected clients within 72 hours of detection. Clients who discover a potential vulnerability are encouraged to report it via our responsible disclosure process to allow us to remediate the issue before it is publicly disclosed.