Contents
Infrastructure
User data is stored on Alibaba Cloud Hong Kong data centres, certified to ISO 27001, protected by multi-layer firewalls and WAF.
Encryption
All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256.
Access Controls
Production database access follows the principle of least privilege. All access is logged and audited. Staff require multi-factor authentication (MFA).
Vulnerability Disclosure
If you discover a security vulnerability, we commit to:
- Acknowledge receipt within 24 hours
- Complete initial assessment within 72 hours
- Remediate within 7–30 days depending on severity
Please disclose responsibly to: sales@hkhdtp.com
Data Backup
User data is automatically backed up daily. Backups are encrypted and retained for 30 days.
Incident Response
In the event of a data security incident, we will notify affected users within 72 hours and cooperate fully with relevant authorities.