Security Policy
At Ingenium, the security of our users' data is of paramount importance. Ingenium is a freelance engineering marketplace that connects talented engineers with clients. Our website handles payment processes, facilitates project management, and integrates with Zoom for secure meetings. We use Stripe for all payment transactions. This security policy outlines the measures we take to protect your data and ensure the integrity and confidentiality of our services.
Data Protection and Security Measures
1- Data Encryption:
- All sensitive data, including payment information, is encrypted using industry-standard encryption protocols (SSL/TLS) during transmission.
- We store all personal data in encrypted databases to prevent unauthorized access.
2- Access Control:- We store all personal data in encrypted databases to prevent unauthorized access.
- Access to user data is restricted to authorized personnel only, based on the principle of least privilege.
- We implement role-based access control (RBAC) to ensure that users can only access the data and resources necessary for their roles.
3- Authentication:- We implement role-based access control (RBAC) to ensure that users can only access the data and resources necessary for their roles.
- We enforce strong password policies, requiring users to create complex passwords and change them regularly.
- Multi-factor authentication (MFA) is required for accessing sensitive areas of the website.
4- Payment Processing:
- Multi-factor authentication (MFA) is required for accessing sensitive areas of the website.
- All payment transactions are processed through Stripe connected accounts. Stripe adheres to PCI-DSS (Payment Card Industry Data Security Standard) to ensure secure handling of payment information.
- Ingenium does not store credit card information on its servers. All payment details are securely managed by Stripe.
5- Zoom Integration:- Ingenium does not store credit card information on its servers. All payment details are securely managed by Stripe.
- Zoom meetings are integrated securely to facilitate communication between engineers and clients without sharing personal contact details.
- Meeting links and access credentials are generated and shared securely to prevent unauthorized access.
6- Project Management and Invoicing:- Meeting links and access credentials are generated and shared securely to prevent unauthorized access.
- We use secure project management tools to track tasks and generate invoices.
- All project-related data, including documents and communication, is stored in secure, encrypted databases.
- All project-related data, including documents and communication, is stored in secure, encrypted databases.
Network Security
1- Firewalls and Intrusion Detection:
- We use firewalls to protect our network from unauthorized access and malicious attacks.
- Intrusion detection and prevention systems (IDPS) are deployed to monitor and analyze network traffic for suspicious activity.
2- Regular Security Audits:- Intrusion detection and prevention systems (IDPS) are deployed to monitor and analyze network traffic for suspicious activity.
- Regular security audits and vulnerability assessments are conducted to identify and address potential security risks.
- We employ third-party security experts to perform penetration testing and ensure the robustness of our security measures.
- We employ third-party security experts to perform penetration testing and ensure the robustness of our security measures.
Data Backup and Recovery
1- Regular Backups:
- We perform regular backups of all critical data to ensure data integrity and availability.
- Backups are stored in secure, geographically dispersed locations to prevent data loss in the event of a disaster.
2- Disaster Recovery Plan:- Backups are stored in secure, geographically dispersed locations to prevent data loss in the event of a disaster.
- A comprehensive disaster recovery plan is in place to ensure rapid recovery and continuity of services in case of a security breach or other catastrophic events.
- The plan includes procedures for data restoration, system recovery, and communication with users.
- The plan includes procedures for data restoration, system recovery, and communication with users.
User Responsibilities
1- Account Security:
- Users are responsible for maintaining the security of their account credentials and should not share their passwords with others.
- Users should enable multi-factor authentication (MFA) for an added layer of security.
2- Reporting Security Incidents:- Users should enable multi-factor authentication (MFA) for an added layer of security.
- Users should promptly report any security incidents or suspicious activities to Ingenium’s support team at aahmed@ingeniumpros.com
- Ingenium will investigate all reported incidents and take appropriate action to mitigate any security risks.
- Ingenium will investigate all reported incidents and take appropriate action to mitigate any security risks.
Compliance and Legal Requirements
1- Regulatory Compliance:
- Ingenium complies with all relevant data protection and privacy laws, including GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act).
- We regularly review and update our security policies to ensure compliance with evolving legal requirements.
2- Data Breach Notification:- We regularly review and update our security policies to ensure compliance with evolving legal requirements.
- In the event of a data breach, Ingenium will promptly notify affected users and relevant authorities in accordance with applicable laws and regulations.
- We will provide timely updates and take necessary steps to mitigate the impact of the breach.
- We will provide timely updates and take necessary steps to mitigate the impact of the breach.
Continuous Improvement
1- Security Training:
- Regular security training and awareness programs are conducted for all Ingenium employees to ensure they are knowledgeable about current security practices and threats.
- Employees are trained on secure coding practices, data protection, and incident response.
2- Security Policy Review:
- This security policy is reviewed and updated periodically to reflect changes in our security practices and evolving threats.
- Feedback from users and security audits is incorporated into the policy to continuously improve our security posture.
- Regular security training and awareness programs are conducted for all Ingenium employees to ensure they are knowledgeable about current security practices and threats.
- Employees are trained on secure coding practices, data protection, and incident response.
2- Security Policy Review:
- This security policy is reviewed and updated periodically to reflect changes in our security practices and evolving threats.
- Feedback from users and security audits is incorporated into the policy to continuously improve our security posture.
Contact Us
If you have any questions about this security policy or wish to report a security concern, please contact us at:
Ingenium
12306 Amber Lynn Path, Manor TX
Email:support@ingeniumpros.com aahmed@ingeniumpros.com
Ingenium
12306 Amber Lynn Path, Manor TX
Email:support@ingeniumpros.com aahmed@ingeniumpros.com