Security policy
Working version: this document is being legally reviewed. Information in square brackets will be completed before final publication.
1. Objective
Tizofun Éducation implements reasonable technical and organizational measures to protect:
- accounts;
- data;
- resources;
- transactions;
- infrastructure;
- users.
2. Technical measures
Depending on the architecture of the service, measures may include:
- encryption of communications;
- access control;
- authentication;
- logging;
- backups;
- monitoring for anomalies;
- limits on administrative access;
- security updates.
3. Users' responsibility
Users must:
- protect their passwords;
- not share their credentials;
- use secure means of access;
- report suspicious activity.
4. Security incident
In the event of an incident, Tizofun Éducation takes reasonable steps to:
- identify the problem;
- limit its impact;
- restore the service;
- protect data;
- comply with the applicable notification obligations.
5. Reporting a vulnerability
Researchers or users may report a vulnerability to:
[SECURITY EMAIL]
They are invited to provide enough information to allow it to be reproduced and analyzed.
