Security policy
Scope
This policy summarizes security for the Ranaliz website, cloud platform and mobile apps. It is not a certificate list.
Encryption and transport
Client–server traffic is protected with TLS (HTTPS). Admin sessions use secure cookies and authorization controls.
Access control
Role and site scoped authorization applies. Customer data is not shared with third parties without permission.
Backup and continuity
Cloud deployments use regular backups. On-prem backups are planned with the customer infrastructure.
Vulnerability disclosure
Report findings to [email protected]. We expect responsible disclosure; do not send exploit PoCs.
KVKK / GDPR
Personal data processing is described on the KVKK and GDPR pages.