Security Policy

At We Are Constellation Pte. Ltd. (the company behind Folio), we take the security of our service and your data seriously. This document outlines our security practices and how you can report security concerns.

Reporting Security Vulnerabilities

If you discover a security vulnerability in our service, please report it to us immediately. We appreciate your responsible disclosure and will work with you to address the issue promptly.

Please include the following details in your report:

• Description of the vulnerability
• Steps to reproduce the issue
• Potential impact
• Any suggested fixes or mitigations

We commit to:

• Acknowledging receipt of your report within 48 hours
• Providing a timeline for resolution
• Keeping you informed of our progress
• Publicly crediting you for the discovery (with your permission)

Security Measures

We implement the following security measures to protect your data:

Data Encryption

• All data is encrypted in transit using TLS 1.3
• Data at rest is encrypted using industry-standard encryption

Authentication

• Secure password hashing using modern algorithms
• Session management with secure cookies

Infrastructure

• Regular security updates and patch management
• Automated security scanning and monitoring
• Network isolation and firewall protection
• Regular backups with encrypted storage

Supported Versions

We provide security updates for the current version of our service. We recommend always using the latest version to ensure you have the most recent security patches.

Security Updates

When security issues are discovered and resolved, we will:

1. Patch the vulnerability as soon as possible
2. Notify affected users if their data may have been compromised
3. Document the issue in our security advisory log

Third-Party Security

We carefully vet all third-party services and libraries we use. We regularly review their security practices and promptly update dependencies when security patches are released.

Our Commitment

We are committed to implementing industry-standard security practices and continuously improving our security posture. As our service grows, we plan to pursue formal security certifications and compliance frameworks.

Contact

For any security-related questions or concerns, please contact our security team:

Thank you for helping us keep Folio secure for everyone.