Sprinno Security Policy

Effective Date: 1st Nov 2024

1. Introduction

At Sprinno, we are committed to maintaining the security of our users' data and the integrity of our platform. This Security Policy outlines the measures we take to protect our users' data, secure the Platform, and prevent unauthorized access.

2. Data Encryption

  • Encryption in Transit: All data transmitted between your device and our servers is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols to protect against interception by unauthorized third parties.
  • Encryption at Rest: Sensitive data stored on our servers, such as personal information and payment details, is encrypted using Advanced Encryption Standard (AES) encryption methods.

3. Access Control

  • User Authentication: Users must log in to their accounts using secure login credentials. We encourage the use of strong passwords and two-factor authentication (2FA) for enhanced security.
  • Internal Access Control: Only authorized personnel have access to the data necessary to perform their job functions. We use role-based access control (RBAC) to limit access to sensitive information.

4. Monitoring and Audits

  • Security Monitoring: We continuously monitor the Platform for suspicious activity and unauthorized access attempts. Automated alerts notify our team of potential security incidents in real-time.
  • Third-Party Audits: Sprinno undergoes periodic security assessments and audits by third-party experts to ensure that we comply with industry best practices for security.

5. Incident Response

In the event of a security breach, Sprinno has an Incident Response Plan to:

  • Investigate and mitigate the breach.
  • Notify affected users promptly.
  • Take steps to prevent further damage and ensure that the Platform remains secure.

6. Secure Development Practices

  • Code Reviews: All code changes made to the Platform undergo rigorous peer reviews and security testing before being deployed to production.
  • Vulnerability Patching: We regularly update our systems and applications to patch known vulnerabilities and prevent exploits.

7. Data Backup and Recovery

We perform regular backups of our data and systems to ensure that we can quickly recover from any potential data loss or system failure. Our backups are stored in secure, geographically distributed data centers.

8. User Responsibilities

While we strive to protect your data, you also play a role in maintaining the security of your account. We strongly recommend:

  • Using strong, unique passwords.
  • Enabling two-factor authentication (2FA).
  • Not sharing your login credentials with anyone.

9. Reporting Security Issues

If you discover any security vulnerabilities or suspicious activities on the Sprinno Platform, please report them immediately to our security team at sprint@sprinno.xyz.

10. Changes to This Policy

We may update this Security Policy from time to time. We will notify you of significant changes through our Platform or by email.

11. Contact Us

For any questions or concerns regarding our security practices, please contact us at sprint@sprinno.xyz.