Trust

How we handle your data and access.

Our standard practice on every engagement. If your contract asks for more, the contract wins.

[01]Standard practice

Six rules we follow.

01
Named accounts with MFA
Any admin access uses a named account with multi-factor authentication. No shared passwords.
02
Least privilege, then removed
We ask only for the access the work needs, and it is removed or handed back at the end of the engagement.
03
Your data stays with you
Client data stays in client systems wherever possible. Anything we must hold is encrypted and deleted after the engagement unless the contract says otherwise.
04
NDA first
An NDA is in place before any discovery involving confidential information. We sign yours or provide ours.
05
Authorised testing only
Penetration testing happens only with written authorisation and an agreed scope.
06
Need-to-know findings
Findings are shared only with the contacts you name.

[02]Personal data

How this website handles personal data is set out in our privacy notice. Grievance contact: info@cloudcyber.co.in (we respond within 30 days).

[03]Responsible disclosure

Report it to info@cloudcyber.co.in with the subject "Security". Please give us reasonable time to fix it before sharing details publicly.

Also published at /.well-known/security.txt

[04]Contact

Tell us about your infrastructure, security or automation goals. We reply with questions, then a written plan with scope and next steps.

What happens next