1. Security Commitment

AppliedMode takes a defence-in-depth approach to protecting institutional and user data. This statement provides a high-level overview of our security practices. It intentionally does not disclose sensitive implementation details that could assist attackers.

2. Encryption

Data is encrypted in transit using modern TLS protocols. Sensitive data at rest is protected using industry-standard encryption mechanisms within our cloud infrastructure.

3. Authentication and Access Control

Access to the Platform requires authenticated sessions with role-based permissions. Institutions configure user roles and access scopes within their workspace. Administrative actions are restricted to authorised personnel.

4. Infrastructure and Segregation

The Platform is hosted on reputable cloud providers with physical and environmental controls. Institutional workspaces are logically segregated to reduce the risk of cross-tenant data exposure.

5. Backups and Recovery

We maintain backup and recovery procedures designed to restore service and data following incidents or infrastructure failures. Backup retention follows operational and contractual requirements.

6. Monitoring and Incident Response

AppliedMode monitors systems for anomalous activity and maintains incident response procedures to investigate, contain, and remediate security events. Affected institutions are notified where required by contract or law.

7. Vulnerability Management

We assess and remediate vulnerabilities through patching, code review, dependency management, and security testing appropriate to risk.

8. Responsible Disclosure

Security researchers and users who discover potential vulnerabilities should report them responsibly to security@appliedmode.com. Do not conduct testing that could disrupt service without prior written authorisation.

We request good-faith reports with sufficient detail to reproduce the issue and ask that findings not be publicly disclosed until we have had a reasonable opportunity to investigate and remediate.