1. Our approach
CUBOT INFOTECH LLP takes reasonable administrative, technical, and organizational measures to protect Lead Pattern and the data entrusted to us. Security is an ongoing practice, not a one-time checklist.
2. Practices we employ
Encryption
Data in transit to our services is protected using TLS where supported. Sensitive credentials are stored using industry-standard hashing or encryption approaches appropriate to the data type.
Authentication & access control
Account authentication, role-based access within workspaces, and least privilege for internal operational access. Customers should enable strong passwords and manage team roles carefully.
Infrastructure & backups
Production systems are hosted with reputable cloud providers. Backups are taken on a schedule appropriate to service continuity. Specific hosting regions: [HOSTING REGION / PROVIDER].
Monitoring & incident response
We monitor for availability and suspicious activity. If a personal data breach requiring notification occurs, we will notify affected customers and authorities as required by applicable law.
Employee access
Access to customer data by staff is limited to what is needed for support, operations, and security, subject to internal controls.
Third-party services
We use subprocessors for hosting, email, payments, and related functions. We review providers as part of vendor management. A current list may be provided on request: founders@leadpattern.com.
3. What we do not claim
Unless separately evidenced and published, we do not claim SOC 2, ISO 27001, HIPAA, PCI DSS, or “GDPR certified” status. If certifications are obtained later, this page will be updated.
4. Your responsibilities
- Protect account credentials and API keys
- Configure team permissions appropriately
- Report suspected security issues promptly
5. Report a security concern
Email founders@leadpattern.com with “Security” in the subject line, or use Report a Problem.