What is in place
- The site and portals are served over HTTPS, and sign-in uses protected, signed-in sessions.
- Forms use anti-forgery tokens and basic spam checks before a submission is accepted.
- Client-portal data is limited to the signed-in client; staff access is role based.
- Administrative actions are recorded in an audit log that the application cannot edit or delete.
- Secrets in the internal credential vault are shown only through a controlled reveal flow, not in lists or exports.
- Releases are deployed through a reviewed process with a backup taken first.
What we do not claim
We do not publish compliance certifications, penetration-test results or uptime guarantees on this page because none are offered here. If a contract needs specific security terms, we will state them in writing for that engagement.
Report a security concern
Email info@incipit.in with the page or feature, the steps to reproduce, and any impact you can see. Please do not access other people's data, run denial-of-service tests or publish details before we have had a reasonable chance to fix the issue. We will acknowledge good-faith reports; no reward programme is offered.
Continue
Ready to begin?
Tell us what you want to build, fix or hire for. We reply with questions, options and a written proposal.