Security Commitment Policy

We follow strict internal controls to protect customer data, including role-based access controls, encryption, and secure data storage practices. We comply with applicable data privacy regulations, including CCPA and CPRA for California residents.

Access to systems and data is limited to authorized personnel on a need-to-know basis. Multifactor authentication (MFA), password complexity policies, and account auditing are standard practices.

We evaluate and work only with technology vendors and service partners that meet stringent security and compliance requirements. Vendor risk is assessed as part of every project and procurement process.

All internal systems are deployed with secure configurations and are updated regularly to mitigate known vulnerabilities.

We employ enterprise-grade firewalls, intrusion detection/prevention systems, endpoint protection, and encrypted communications across all company infrastructure and projects.

All Safari Micro employees undergo annual cybersecurity training and are required to follow internal IT security policies. Simulated phishing and social engineering tests are conducted to ensure continuous awareness.

We maintain an internal incident response plan to identify, contain, and resolve any suspected security events. Clients will be notified promptly in accordance with applicable laws and contractual obligations in the event of any breach involving their data.

Safari Micro maintains tested disaster recovery (DR) and business continuity plans with repeatable operating procedures to minimize downtime and data loss during unforeseen events.