Security and trust
How we protect the information entrusted to us. This page describes our current practices; it is not a certification.
Encryption in transit
Our websites are served over HTTPS, and connections to our service providers are encrypted.
Access control
Administrative access requires verified sign-in and explicit authorization that is checked on the server. Each role can reach only what it needs.
Infrastructure
We rely on established cloud providers for hosting, databases, authentication, and email delivery rather than operating our own servers.
Business email
Messages sent to our company addresses are processed by our email provider and stored in private systems. Attachments are never publicly accessible.
Data minimisation
We collect only what we need. Our website statistics do not use cookies and do not store IP addresses.
Certifications
Appsfield does not currently hold formal security certifications. We will only describe certifications here once they have been obtained.
Reporting a vulnerability
If you believe you have found a security issue in one of our websites or products, please email contact@appsfield.co with the word “Security” in the subject. Include enough detail for us to reproduce the issue.
Please do not access or modify other people’s data, disrupt our services, or publicly disclose the issue before we have had a reasonable opportunity to address it.