Security

Overview

Affinux LLC builds software for businesses that depend on reliability and careful handling of data. This page summarizes how we approach security for client engagements and for this website. Project-specific controls are defined in each statement of work.

Delivery practices

• Threat modelling and security requirements are discussed during planning when the project warrants it.
• Source code lives in the client's repositories wherever possible, with access limited to assigned engineers.
• Dependency and secret scanning can be enabled in CI as part of the delivery pipeline.
• Independent penetration testing can be commissioned before launch when agreed in scope.
• Production infrastructure is typically provisioned in the client's cloud accounts under least-privilege access.

Data handling

We treat client data as confidential. Access is limited to people working on the engagement. We do not use client production data for unrelated purposes. When test data is needed, we prefer synthetic or anonymized datasets. Retention and deletion of project artifacts follow the client agreement and our privacy policy.

Website and inquiries

This marketing site is hosted on industry-standard infrastructure with HTTPS. Contact forms may store submissions locally in the browser for demonstration purposes and/or transmit them through channels we configure for lead handling. Do not submit passwords, payment card numbers, government ID numbers, or other highly sensitive credentials through the public contact form.

Incident response

If we become aware of a security incident that affects your data or systems under our care, we will notify the designated client contact without undue delay and cooperate on remediation as required by the governing agreement and applicable law.

Reporting a concern

If you believe you have found a vulnerability in an Affinux-operated property, or need to discuss security for an engagement, contact support@affinux.com. Please include enough detail for us to reproduce and prioritize the issue. Do not access or modify data that is not yours.

Contact

Affinux LLC
30 N Gould St Ste N
Sheridan, WY 82801
support@affinux.com