Security is foundational to how OpsRadarX is built and operated. This page describes the technical and organizational measures OpsRadarX Tech Solutions uses today to protect your data, and the direction we're building toward as we grow.
Encryption
All data transmitted to and from the Services is encrypted in transit using Transport Layer Security (TLS 1.2 or higher). Data at rest, including Customer Data and backups, is encrypted using industry-standard AES-256 encryption.
Access Control
Access to production systems and Customer Data is restricted to authorized personnel on a need-to-know basis, using role-based access control and multi-factor authentication. Access is logged and periodically reviewed.
Infrastructure and Hosting
The Services are hosted on reputable cloud infrastructure providers with data center-grade physical security, redundancy, and network protections, including safeguards against distributed denial-of-service (DDoS) attacks.
Application Security
We follow secure software development practices, including code review, dependency vulnerability scanning, and periodic security testing of the application. We maintain a process for receiving and responding to reported vulnerabilities.
Data Backup and Business Continuity
We perform regular backups of Customer Data, stored encrypted and separately from primary systems, to support recovery in the event of data loss. We maintain procedures to restore service availability in the event of an infrastructure disruption.
Incident Response
We maintain an incident response process to detect, assess, and respond to security incidents. If a security incident results in unauthorized access to your data, we will notify affected customers without undue delay, consistent with our legal obligations.
Multi-Tenancy and Data Isolation
The Services are architected as a multi-tenant platform with logical separation between customer accounts, ensuring that one customer’s data is not accessible to another customer.
Payment Security
We do not store full card numbers or sensitive card data on our servers. Payment processing is handled by PCI DSS-compliant payment gateway partners, and card data never transits our systems in unencrypted form.
Our Compliance Roadmap
As OpsRadarX scales, we are building toward industry-recognized security and compliance certifications (such as ISO/IEC 27001 and SOC 2) similar to those held by established platforms in this space. This page will be updated as we complete formal audits and certifications.
Your Responsibilities
Security is a shared responsibility. We recommend that you:
use strong, unique passwords for your account;
enable multi-factor authentication where available;
limit the number of administrator accounts in your organization and review user access regularly; and
promptly report any suspected unauthorized access to your account.
Reporting a Vulnerability
If you discover a potential security vulnerability in OpsRadarX, please report it to us at security@opsradarx.com. We ask that you do not publicly disclose the issue until we have had an opportunity to investigate and address it.
Contact Us
For questions about our security practices, contact us at security@opsradarx.com.