1. Our approach
Willsoar Technologies LLP uses a risk-based approach to security. We apply proportionate technical and organisational measures to protect the confidentiality, integrity, and availability of the information and systems used to operate this Site and support our business.
Measures include access controls, authentication for administrative systems, input validation, rate limiting for public enquiry submissions, and practices intended to reduce unauthorised access and abuse. We review and improve our approach as technology, risks, contractual obligations, and applicable laws change.
This Policy describes our public-facing security position. It does not disclose sensitive controls or create a contractual security commitment. No security measure can guarantee that an incident will never occur.
2. Responsible disclosure
If you believe you have identified a security vulnerability affecting the Site, report it to security@willsoartechnologies.com with the subject line Security vulnerability report. Please include enough detail for us to reproduce the issue safely.
Do not access, alter, delete, exfiltrate, or disclose data; disrupt services; use social engineering; or perform testing that could harm users or systems. Please give us a reasonable opportunity to investigate and remediate a report before public disclosure. This Policy does not authorise testing or create a safe-harbour commitment unless we provide one in writing.
3. Incident handling
We assess reported security events, contain and investigate confirmed incidents, and take corrective action appropriate to the circumstances. Where notification is required by applicable law or contract, we follow the applicable notification process.
4. Customer and project security
Security responsibilities for client work are defined in the relevant written agreement, statement of work, data-processing agreement, and project-specific security documentation. Prospective clients may discuss relevant security requirements through a confidential sales or procurement process.
5. Contact
For a potential vulnerability, email security@willsoartechnologies.com. For general questions, contact hello@willsoartechnologies.com.