Security & Incident Response Policy

• Least-privilege access should be used where supported.
• Administrative access should be protected by strong credentials and MFA where available.
• Production access should be restricted and logged where technically supported.
• Data should be encrypted in transit and at rest where supported by the product architecture.
• Backups and recovery controls should be maintained according to the product's operational requirements.
• Security vulnerabilities should be reported responsibly to info@wisdsol.com.
• Material incidents will be investigated and customers/regulators notified when required by contract or applicable law.

Responsible disclosure

Security researchers should provide enough information to reproduce a vulnerability, avoid accessing or copying unnecessary personal data, avoid destructive testing and allow Wisdsol reasonable time to investigate and remediate.