Security Information
An overview of how DigiXtreme considers security when building, integrating and supporting software.
1. Security responsibilities
Security is a shared responsibility. DigiXtreme applies controls relevant to the software or service we provide, while customers remain responsible for areas they control, such as user access, devices, internal policies and customer-managed infrastructure.
2. Access and authentication
Where relevant, systems can use controlled user access, authentication and role-based permissions so people have access appropriate to their responsibilities.
3. Application and development security
Security is considered during design, development, testing and maintenance. The controls used depend on the application, its exposure, the information involved and the agreed requirements.
- Examples may include input validation, access checks, dependency and configuration review, relevant testing and controlled release practices.
4. Data protection
We use technical and organisational measures appropriate to the information and systems involved. Access to business information should be limited to people and systems that need it.
5. Integration security
Integrations should use controlled access, appropriate authentication, validation and secure communication methods based on the systems being connected.
Integration security depends partly on the capabilities and configuration of the connected systems.
6. Infrastructure and deployment
Infrastructure responsibilities depend on the deployment model. Cloud-hosted, customer-hosted and third-party environments may have different responsibilities and controls. These should be agreed during implementation.
7. Monitoring, maintenance and recovery
Monitoring, updates, backups and recovery planning are applied where they are part of the agreed service or deployment.
8. Security issues and reporting
If you believe you have found a security issue affecting a DigiXtreme website, product or service, please report it privately rather than publishing sensitive details.
9. Customer responsibilities
Customers should manage their own users and permissions, protect administrator accounts, keep customer-managed devices and infrastructure maintained, and tell DigiXtreme when access should change.
10. Questions about security
If you have a security question or need to report a potential issue, use our Contact page and choose Security or privacy. You can also email us at the address below.