Security Policy

Security Policy

BestChar ("Company" or "we") prioritizes user privacy and data security, providing safe services through robust security measures.

1. Security Principles

• Confidentiality: Ensure only authorized users can access information
• Integrity: Maintain accuracy and completeness of data
• Availability: Ensure stable service availability

2. Data Security

Encryption

• HTTPS/TLS 1.3: Latest TLS protocol applied to all web communications
• AES-256: Database encryption
• End-to-End Encryption: End-to-end encryption of sensitive data

Access Control

• Role-Based Access Control (RBAC)
• Multi-Factor Authentication (MFA) support
• Session management and automatic expiration

3. Infrastructure Security

• AWS security services utilization
• WAF (Web Application Firewall)
• DDoS protection system
• 24/7 security monitoring

4. Vulnerability Management

• OWASP Top 10 compliance
• Regular security audits and penetration testing
• Automated vulnerability scanning

5. Security Incident Response

For security incidents: security@ibou.ai

Effective Date: January 1, 2024