تعمل على مشروع كبير؟احجز مكالمة استكشافية مجانية

هذه الصفحة متاحة حاليًا بالإنجليزية فقط.

Security & Trust

How we protect your code, data and ideas

Plain statements of how we work, with no badges we have not earned. [PLACEHOLDER_TRUST_REVIEW] This page is a draft and every item awaits owner confirmation.

Practices

  • Secure development lifecycle

    • Security considered from design onward, not only before launch.
    • Code review and automated tests as part of delivery.
    • Dependency and configuration review as part of project work. [PLACEHOLDER_CONFIRM_SDLC]

  • NDA and confidentiality

    • We are happy to sign an NDA before you share your idea.
    • Project information is shared only with people working on it. [PLACEHOLDER_CONFIRM_NDA_POLICY]

  • Code and IP ownership

    • Source code and intellectual property for delivered work transfer to you, as set out in the contract.
    • Exceptions such as third-party or open-source components are listed in the agreement. [PLACEHOLDER_CONFIRM_IP_POLICY]

  • Data handling

    • We collect only the data needed for the stated purpose and do not publish it.
    • CV uploads are stored outside the public web directory.
    • Form input is validated on the server and forms are rate-limited.
    • Details are in the privacy policy (a template pending legal review). [PLACEHOLDER_CONFIRM_DATA_PRACTICES]

  • Access control

    • Access to project systems is limited to the people who need it.
    • Client access can be removed at the end of an engagement. [PLACEHOLDER_CONFIRM_ACCESS_POLICY]

  • Security reviews

    • We perform internal security reviews on relevant projects.
    • Independent third-party audits are offered as a separate service where requested. [PLACEHOLDER_CONFIRM_REVIEWS]

Responsible disclosure

Found a vulnerability?

If you believe you have found a security issue in this website, please email [PLACEHOLDER_SECURITY_EMAIL] with enough detail to reproduce it.

  • Please do not access other people's data or disrupt the service while testing.
  • Please give us reasonable time to fix the issue before disclosing it publicly.
  • We do not currently run a bug-bounty programme. [PLACEHOLDER_CONFIRM_DISCLOSURE_POLICY]

Certification roadmap

What we do not hold yet

SBMM Tech currently holds no security or compliance certifications. The items below are possible future goals, not achievements, and carry no commitment or date.

  • ISO/IEC 27001Not held. Under consideration. [CERT_ROADMAP_YEAR_X]
  • SOC 2Not held. Under consideration. [CERT_ROADMAP_YEAR_X]
  • Other (to be decided)Not held. [CERT_ROADMAP_YEAR_X]

لنبنِ معًا شيئًا يستحق الإطلاق

مكالمة مدتها 30 دقيقة تكفي لنخبرك إن كنا الشريك المناسب.

احجز استشارة مجانية
اطلب عرض سعر