Effective Date: May 6, 2025
This Information Security Policy outlines the measures Vccpanda takes to protect data, ensure confidentiality, maintain integrity, and safeguard system availability for all users of our freelance marketplace platform at https://www.vccpanda.net.
1. Purpose and Scope
The purpose of this policy is to define security protocols that protect the information assets of Vccpanda, including personal data, project communications, financial transactions, and technical infrastructure. This policy applies to all users, employees, contractors, and third-party service providers.
2. Data Classification and Access Control
All user and operational data are classified based on sensitivity. Access to data is restricted through role-based access controls (RBAC). Only authorized personnel with a legitimate business need are granted access, and all access is logged and monitored.
3. Secure Data Storage and Transmission
Data transmitted through the Vccpanda platform is encrypted using SSL/TLS protocols. Stored data is protected using AES-256 encryption, with additional server-side security mechanisms to ensure safe retention and access control.
4. User Authentication and Account Security
All users must create secure passwords and are encouraged to enable two-factor authentication (2FA) where applicable. Login sessions are monitored for unusual activity and terminated after a period of inactivity. We do not share or disclose account credentials with any third party.
5. System Monitoring and Threat Detection
Vccpanda uses automated tools to monitor platform activity, detect threats, and identify system vulnerabilities in real time. Regular audits and penetration tests are conducted to ensure compliance with industry standards.
6. Incident Response and Breach Notification
In the event of a data breach or system incident, our internal security team follows a structured response protocol. Affected users will be notified within 72 hours in compliance with data protection regulations. The incident will be investigated, documented, and remediated promptly.
7. Vendor and Third-Party Security
Any third-party service provider working with Vccpanda is subject to security vetting and must adhere to data protection and security standards equal to our own. Contracts include clauses on data security, confidentiality, and compliance.
8. Training and Awareness
All team members handling sensitive information undergo regular training on security best practices, phishing prevention, and proper data handling procedures to ensure consistent and secure operations across the organization.
9. Policy Updates and Revisions
This Information Security Policy may be updated periodically to reflect changes in technology, threat landscape, or regulatory requirements. Users will be notified of any significant changes through the platform or email.
10. Contact Information
For questions or concerns about this Information Security Policy or to report a security issue, contact us:
Email: hello@vccpanda.net
Phone: +44 7476 810756
Address: 442 N Barranca Ave, Suite 192, Covina, CA 91723, USA