Website security
- The website is served over HTTPS.
- The public website is static where possible, which reduces the attack surface.
- Hosting and deployment access is limited to people who need it for their work.
- Software, dependencies and server configuration are reviewed when changes are made.
Access and data handling
- Access to business systems is granted on a need-to-know basis.
- Where possible, accounts use strong authentication and role-based access.
- Client information is shared only through appropriate business channels and with people who need it to provide services.
- We avoid collecting unnecessary personal data through the website.
Providers
We choose service providers with appropriate security standards for hosting, email, document handling and business operations. Where required, providers process personal data under suitable contractual terms.
Incidents
If we become aware of a security incident, we investigate it, take steps to contain it and notify affected parties or authorities where legally required.
Reporting security issues
If you believe you have found a security issue on selgus.eu, please contact hello@selgus.eu with a clear description. Please do not access, change or disclose data that is not yours.