Security Policy
Our commitment to protecting your data and maintaining a secure platform
Our Security Commitment
At ZORO Marketing, security is fundamental to everything we do. We implement industry-leading practices to protect your data and maintain the trust you place in us.
Security Practices
Data Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
Access Control
Role-based access control (RBAC) ensures only authorized personnel can access sensitive data.
Regular Audits
We conduct regular security audits and penetration testing to identify vulnerabilities.
Secure Infrastructure
Our infrastructure is hosted on enterprise-grade cloud platforms with SOC 2 compliance.
Monitoring & Logging
24/7 monitoring and comprehensive logging help us detect and respond to threats quickly.
Employee Training
All team members undergo regular security awareness training and follow strict protocols.
Vulnerability Disclosure Policy
We appreciate the security research community and encourage responsible disclosure of any vulnerabilities you may discover.
What to Include
- Detailed description of the vulnerability
- Steps to reproduce the issue
- Potential impact assessment
- Any suggested remediation steps
- Your contact information for follow-up
Response Timeline
Scope
In Scope
- • zoromarketing.com and all subdomains
- • API endpoints
- • Authentication systems
- • User data handling
- • Payment processing flows
Out of Scope
- • Social engineering attacks
- • Denial of service attacks
- • Physical security issues
- • Third-party services we integrate with
- • Spam or phishing campaigns
Safe Harbor
We will not pursue legal action against security researchers who:
- Act in good faith
- Avoid privacy violations
- Do not destroy or modify data
- Report findings promptly
- Give us reasonable time to remediate
- Do not access accounts without permission