Security & Compliance
Last updated: 31 May 2025
We treat security as a first-class engineering discipline. Every system we build is designed with security from the first architecture decision — not added at the end.
Security Practices
Data Encryption
TLS encryption for data in transit. Sensitive data encrypted at rest using industry-standard algorithms, configured per platform and scope.
Access Controls
Role-based access control (RBAC) and least-privilege permissions. Multi-factor authentication required for all internal systems.
Security Monitoring
Monitoring, threat detection, centralised logging, and alerting configured for production environments based on risk and operational needs.
Infrastructure Security
Cloud architecture includes network isolation, security groups, WAF controls, secret management, and coordinated penetration testing.
Secure Development Lifecycle
Threat Modelling
Security requirements and threat analysis during architecture design — before any code is written.
Secure Coding
OWASP-aligned coding standards, input validation, parameterised queries, and secure dependency management.
Static Analysis
Automated SAST scanning on every pull request. Dependency vulnerability scanning with automated tooling.
Code Review
Security-focused peer review on all code changes. No direct commits to main or production branches.
Penetration Testing
Periodic third-party penetration testing for client-facing applications and APIs.
Incident Response
Documented incident response plan with defined SLAs for detection, containment, and notification.
Compliance Standards
Responsible Disclosure
If you discover a potential security vulnerability in any Avantika Technology product or service, please report it confidentially before making it public. We commit to:
- Respond within 48 hours of receipt
- Work with you on coordinated, responsible disclosure
- Acknowledge your contribution if desired
- Not pursue legal action for good-faith security research
Have a question about this policy?
Contact us directly and we will respond within one business day.
Email Us