Security at Dynaiz

Our approach

Security is part of how we design, build, operate, and support Dynaiz systems. We use risk-based controls and improve them as our services mature. This page describes our current approach; it does not claim a certification or create a contractual security commitment.

Security practices

• Access: access is limited by role and reviewed as systems and responsibilities change.
• Data protection: we use transport encryption and apply storage protection appropriate to the service and information involved.
• Engineering: changes are reviewed, dependencies are maintained, and security checks are included in delivery workflows.
• Operations: logging, monitoring, backups, and incident procedures are applied according to service risk.
• People: team members are expected to protect credentials, devices, customer information, and confidential material.

Shared responsibility

Security depends on both Dynaiz and the people using a service. Customers and users are responsible for protecting their credentials, choosing appropriate access, keeping their own devices secure, and reporting suspicious activity promptly. Product-specific responsibilities may be described in the relevant service agreement or documentation.

Report a vulnerability

If you believe you have found a security issue affecting a Dynaiz website or service, email info@dynaiztechnology.com with “Security report” in the subject line.

Please include:

• The affected page, service, or system.
• A clear description of the issue and its potential impact.
• Steps that allow us to reproduce it safely.
• Your preferred contact details for follow-up.

Please do not access or change other people's data, disrupt services, use social engineering, or publish the issue before we have had a reasonable opportunity to investigate it.

What happens next

We will acknowledge a credible report, assess its scope and severity, and keep the reporter informed when practical. Remediation time depends on the issue, affected service, and risk. We do not offer a public bug-bounty payment unless a written programme says otherwise.