Security & Encryption Policy

IDFlow Secure™ is designed to protect the privacy, confidentiality, integrity and availability of user information.

This Security & Encryption Policy explains the security principles, controls and safeguards implemented to protect information stored, processed and transmitted through the IDFlow Secure platform.

IDFlow Secure operates on a privacy-first and security-first foundation. Security is incorporated into:

IDFlow Secure utilises modern industry-standard encryption technologies to protect information. Information may be protected through:

• Encryption in Transit
• Encryption at Rest
• Secure Communication Channels
• Cryptographic Key Management
• Encrypted Backups
• Secure Authentication Protocols

Sensitive information is protected before, during and after transmission.

Where technically feasible and applicable to the service, IDFlow Secure may implement end-to-end encryption for certain categories of information. Examples may include:

IDFlow Secure is designed around privacy-by-design and zero-knowledge principles wherever practical. IDFlow Secure employees are not permitted to access user information unless:

• Access is authorised
• Access is necessary
• Access is legally permissible
• Access is recorded and audited

Access to systems and information is controlled through:

• Role-Based Permissions
• Multi-Factor Authentication
• Segregation of Duties
• Audit Logging
• Security Monitoring

Only authorised personnel may access systems required for their responsibilities.

Users may be required to verify identity using:

IDFlow Secure maintains audit records relating to:

IDFlow Secure may monitor systems for:

• Fraud
• Suspicious Activity
• Unauthorised Access Attempts
• Security Incidents
• Abuse of Services

In the event of a security incident, IDFlow Secure may:

• Investigate the incident
• Restrict access
• Notify affected users where required
• Notify authorities where required
• Implement corrective measures

Users remain responsible for:

• Protecting passwords
• Protecting devices
• Maintaining accurate information
• Reporting suspicious activity
• Following security guidance

Failure to do so may increase security risks.

Where integrations exist with government, business, recruitment, financial or healthcare systems, reasonable efforts will be made to ensure secure information exchange.

IDFlow Secure cannot guarantee the security practices of third parties.

IDFlow Secure may conduct:

No technology platform can guarantee absolute security. While IDFlow Secure implements security measures designed to protect information, users acknowledge that risks associated with technology and internet communications cannot be entirely eliminated.

IDFlow Secure may update this Security & Encryption Policy from time to time. Continued use of the platform constitutes acceptance of updated policies.