01.
Least privilege
Access should be granted narrowly, reviewed regularly and revoked as soon as it is no longer needed.
SecurityDIYAN AI / HYD
Security treated as an engineering discipline
Security decisions are made alongside architecture decisions. The principles below are the engineering standards we build to as our systems mature.
Principles
The standards we build to
02.
Defence in depth
Controls are layered so that a single failure cannot become a systemic compromise.
03.
Encryption in transit and at rest
Encryption in transit and at rest is a core requirement for systems handling protected data, using current, well-reviewed cryptographic standards.
04.
Secure development
Code review, dependency review and automated checks belong on the path to production.
05.
Logging and monitoring
Systems should emit the signals needed to detect unusual behaviour and reconstruct events.
06.
Prepared response
Incident handling needs defined owners, communication paths and post-incident review.
Disclosure
Reporting a vulnerability
If you believe you have found a security issue affecting DIYAN AI, please contact us directly with enough detail to reproduce it. We ask that you give us reasonable time to investigate and remediate before any public disclosure, and that you avoid accessing or modifying data that is not yours.