Our Approach
- access controls and least-privilege administration;
- encrypted HTTPS transmission;
- managed hosting, software updates, backups and monitoring;
- careful selection of service providers;
- data minimisation, retention review and incident response practices.
Your Role
Do not send passwords, health records, assessment responses or other sensitive information through public email, Advisor, WhatsApp or contact forms. Keep login credentials confidential and report suspicious activity promptly.
Responsible Disclosure
If you believe you have found a security issue, email info@hummingsun.co.in with the affected URL, steps to reproduce and potential impact. Do not access or modify data beyond what is required to demonstrate the issue, and allow us reasonable time to investigate and respond before public disclosure.