Security Overview

Our approach

We take a practical, evidence-based approach to security. This overview describes controls that apply to this website today; it will be expanded as further controls are formally verified. We do not claim controls we have not implemented.

Protecting data in transit

The website is served over HTTPS so traffic between your browser and our servers is encrypted. Enquiries submitted through the site are transmitted over encrypted connections to our support inbox.

Hosting and access

• The site runs on managed server infrastructure with access limited to authorised personnel.
• Administrative access and content-management access are restricted, and credentials are provisioned individually.
• Secrets and API keys are stored as server environment variables and are never committed to source control.

Handling enquiry data

Enquiry submissions are delivered to a controlled support mailbox and are not published or shared beyond the team that needs them to respond.

Development practices

We use version control and review changes before release, keep dependencies maintained, and run automated checks (type-checking, linting and tests) as part of our build.

Reporting a vulnerability

If you believe you have found a security issue, please contact support@vigercloud.com so we can investigate. Please do not publicly disclose an issue before we have had a chance to respond.