📝 Draft for review — this document is a working template and is not yet legally reviewed. Placeholders in yellow must be completed before launch.
Security
Effective date: 2026-07-13 · Service: IPM (ipuipu.com), operated by [Company legal name] (“IPM”, “we”, “us”). Contact: [legal@your-domain].
Security is core to IPM. This page summarizes our practices.
- Encryption in transit (TLS) for all traffic.
- Passwords stored only as salted hashes; optional passkey/MFA for operators.
- Strict per-tenant data isolation.
- Least-privilege access, audit logging, and regular backups.
Report vulnerabilities to [security@your-domain]. We aim to acknowledge reports promptly.