Security

This Security page describes the security measures we apply to Pyvorin Portal and the Pyvorin compiler platform, as well as the responsibilities of users.

1. Our responsibilities

We take reasonable technical and organisational measures to protect the platform and customer data, including:

Encryption of data in transit using TLS.
Access controls and role-based permissions.
System logging and monitoring.
Regular security updates and patching.
Backups and disaster-recovery procedures.
Review and assessment of subprocessors.

2. Your responsibilities

You are responsible for maintaining the security of your account credentials, API tokens and licence keys. You should use strong passwords, enable multi-factor authentication where available, restrict access within your organisation, and report suspected unauthorised access promptly.

3. Source code and customer content

You retain ownership of source code and other content uploaded to the Service. We process it only to provide the Service. We recommend that you do not upload secrets, credentials or sensitive personal data unless necessary, and that you review your build outputs for accidental disclosure.

4. Vulnerability disclosure

If you discover a security vulnerability, please follow our Vulnerability Disclosure policy. Do not exploit vulnerabilities, access data that is not your own, or disrupt the Service.

5. Incident handling

If we become aware of a security incident that affects your data, we will notify you without undue delay in accordance with applicable law. We will take steps to investigate, contain and remediate the incident.

6. No absolute guarantee

No system is completely secure. We cannot guarantee that the Service will be immune from attack, data loss or unauthorised access. Use of the Service is at your own risk, subject to the limitations in our Terms of Service.