Security & compliance
We design W2MS products with operational security in mind — protecting customer data, limiting access, and responding to incidents responsibly.
Data protection
- Encryption in transit (TLS) for web and API traffic
- Role-based access controls within applications
- Segregation of customer environments where deployments require it
- Regular backups and tested recovery procedures for hosted services
Application security
We follow secure development practices including input validation, authenticated sessions, and dependency monitoring. Security headers are applied on the marketing site and product endpoints where supported.
Compliance
Specific compliance requirements (e.g. privacy regulations, industry standards) are addressed per customer agreement and deployment model. Contact us for security questionnaires or DPA requests.
Responsible disclosure
If you believe you have found a vulnerability, report it via contact with subject “Security disclosure”. Please include steps to reproduce and avoid public disclosure until we respond.
Status
Current service health: system status page.