Legal document
Information Security and Data Processing Summary
An overview of KODMIS's technical and administrative security approach.
Data controller / service provider: KODMIS · [email protected]
1. Principles
- Need-to-know access control
- Encryption in transit (TLS)
- Password hashing and session management
- Role-based authorisation (platform / store separation)
- Audit logs for critical operations
- Regular dependency and infrastructure reviews
2. Sub-Processors
Hosting, database, email, payment, and analytics providers are engaged under contractual safeguards. The current sub-processor list can be shared upon request.
3. Incident Management
Security incident response covers detection, containment, notification (to the Personal Data Protection Board and affected data subjects where required by law), and root-cause analysis.
Contact: [email protected]