Security Overview & Vulnerability Disclosure

Last updated: 19 August 2025

Security Program

  • TLS in transit
  • Encrypted storage at rest
  • RBAC/least-privilege/MFA
  • SSO (enterprise)
  • Code review & dependency scanning
  • Secrets management
  • Logging/monitoring/alerting
  • Rate-limiting
  • Anomaly detection
  • Backups & tested restores
  • Automated deletion (30-day videos / 90-day metadata)
  • Staff training and appropriate background checks

Incident Response

Notify affected Customers without undue delay after confirming a Personal Data Breach; provide status, impact, and mitigation; cooperate with legal/regulatory obligations.

Vulnerability Disclosure

Report issues to info@vidintro.io. We request up to 90 days for coordinated disclosure unless active exploitation requires faster action.

Responsible Disclosure Guidelines

  • Do not access or modify user data
  • Do not perform actions that could harm our services or users
  • Report vulnerabilities promptly and confidentially
  • Allow reasonable time for us to address the issue

Data Security Measures

Technical Measures

  • End-to-end encryption for sensitive data
  • Regular security patches and updates
  • Web Application Firewall (WAF)
  • DDoS protection
  • Secure development lifecycle (SDLC)

Organizational Measures

  • Security awareness training
  • Access control policies
  • Regular security audits
  • Incident response procedures
  • Business continuity planning

Contact

For security concerns or to report vulnerabilities:
info@vidintro.io
STARK PROJECTS LTD (t/a "Vidintro")
24 Finch Drive, Springwood Ind Estate
Braintree, England, CM7 2SF