Security

How we handle your information.

Straightforward account of the security practices behind this website and the systems we build. No certifications we do not hold, and no claims we cannot stand behind.

Encrypted in transit

This site and the client dashboard are served over HTTPS only, with certificates renewed automatically and plain HTTP redirected. Enquiry and support forms post over the same encrypted connection.

Access is restricted and named

Administrative access to the platform is limited to named accounts with individual credentials. There are no shared logins and no demo accounts on the production system.

Secure development practice

Cross-site request forgery protection on state-changing requests, a guard against default or weak credentials reaching production, and an automated test suite that has to pass before anything deploys.

We do not take card data

Samloryx does not collect or store payment card details on this website. Invoices are settled by bank transfer directly with your own bank.

Client work stays separated

Each client engagement is kept in its own repository and environment. Credentials are never shared between clients, and access is removed when an engagement ends.

POPIA-aware by default

We collect the minimum needed to reply to you, we do not sell personal information, and we tell you who processes data on our behalf. The detail is in the privacy policy.

What we do not claim

Samloryx does not hold ISO 27001, SOC 2 or any equivalent independent security certification. Some tenders and enterprise procurement processes require one, and where that is the case we will tell you at the start rather than at the end.

Infrastructure is run on established cloud providers, which means some processing happens outside South Africa. POPIA permits this where the receiving party is subject to comparable protection, and the providers used are chosen on that basis. If your requirements demand local-only processing, say so early and we will design for it.

Site analytics are first-party and built into our own platform. No analytics provider, advertising network or other third party receives anything about your visit, and we store no IP address, device details, identifier or cookie against it. The privacy policy sets out exactly what is recorded.

Found a security problem on this site or in something we built? Email info@samloryxconsultancy.co.za with the detail. We will acknowledge it and we will not come after anyone who reports something in good faith.

See also: Privacy Policy · Website Terms · Legal & company information