Security Policy

1. Encryption

We use industry-standard encryption to protect data in transit (for example, TLS/HTTPS) and apply encryption to sensitive data such as third-party access tokens. We aim to follow current best practices for protecting data at rest with our infrastructure providers.

2. Authentication & Access Control

Access to accounts is protected by authentication, and access to data is governed by row-level security and tenant isolation so that each organization can access only its own data. Internal access to systems is limited to personnel who need it and is subject to the principle of least privilege.

3. Data Protection

• Logical separation of customer data and scoped database access policies.
• Server-only handling of secrets and third-party API keys.
• Validation of input at trust boundaries and protection of file uploads.
• Logging and monitoring designed to detect and respond to suspicious activity.

4. Breach Notification

If a security incident results in unauthorized access to personal information, we will investigate and respond, and we will provide notifications required by applicable law, including the Florida Information Protection Act (FIPA), Section 501.171, Florida Statutes, and any other applicable state or federal breach-notification requirements. Notifications will be provided to affected individuals and regulators within the timeframes required by law.

5. Responsible Disclosure

We welcome reports from security researchers. Please act in good faith, avoid privacy violations and service disruption, do not access or modify data that is not yours, and give us a reasonable opportunity to remediate before any public disclosure. We will not pursue legal action against researchers who follow this policy.

6. Reporting a Vulnerability

To report a suspected vulnerability or security incident, email Mind2Market Group LLC at support@seekori.com with the subject line “Security.” Please include a description, steps to reproduce, and any supporting materials. We will acknowledge your report and work to address valid issues promptly.