Security Statement

1. Our Security Approach

KSafety, operated by Ksafety LTD, stores operational records that may be important for inspections, audits, insurance, staff training, incident review, and due-diligence evidence. We use reasonable technical and organisational measures designed to protect the service and customer records.

2. Data Encryption

In Transit: All data transmitted between your device and KSafety servers is encrypted using TLS 1.2 or higher (HTTPS). This protects your data from being intercepted during transmission.

At Rest: Sensitive data, including compliance records, is encrypted at rest on our servers.

3. Hosting and Infrastructure

KSafety is hosted on secure cloud infrastructure with the following security features:

• Regular security updates and patches
• Automated and manual backups
• Network firewalls and DDoS protection
• Intrusion detection and prevention systems
• Data centre physical security

4. Access Control

We implement strict access controls to limit who can access your data:

• Authentication: You access KSafety using secure credentials. We recommend using a strong, unique password.
• Authorisation: Users within your business can be assigned different roles with permissions limited to data relevant to their role.
• Session Management: Sessions expire after a period of inactivity to reduce the risk of unauthorised access.

5. Customer Security Responsibilities

Customers must keep passwords secure, use appropriate access levels, remove users who no longer need access, keep devices secure, avoid sharing accounts, and contact us promptly if they suspect unauthorised access at hello@ksafety.pro.

6. Backups and Disaster Recovery

KSafety automatically backs up your data. Backups are encrypted and retained according to our data retention approach. This protects against data loss due to hardware failure or other events.

7. Vulnerability Management

KSafety maintains a vulnerability management programme to identify and remediate security risks, including regular security assessments, monitoring and patching of third-party dependencies, and security incident response procedures.

8. Third-Party Service Providers

KSafety uses trusted third-party providers for specific functions (hosting, payment processing, email delivery, analytics). All such providers are required to implement appropriate security controls and data processing agreements where applicable.

9. Data Breach Notification

In the unlikely event of a security breach affecting your data, KSafety will notify you as soon as practicable and provide details of the incident, the data affected, and steps you should take. We will also notify regulators where required by law.

10. Compliance

KSafety is designed to comply with:

• UK GDPR and the Data Protection Act 2018 — UK data protection law
• PCI DSS (where applicable) — Payment Card Industry Data Security Standard for handling payment card information

11. No Absolute Security Guarantee

No online service can guarantee complete security. KSafety works to use reasonable safeguards, but customers remain responsible for secure internal use, staff access, password management, device security, and careful handling of exported files.

12. Reporting Security Concerns

If you believe a KSafety account has been compromised or you identify a security concern, contact hello@ksafety.pro immediately with as much detail as possible. Do not disclose security vulnerabilities publicly — contact us privately so we can address the issue promptly.