Information Security Policy

This Information Security Policy describes the security principles, controls, and practices implemented by ALLE TECH LLC FZ ("ALLE TECH", "RepProX", "we", "our", or "us") to protect customer information processed through the RepProX platform.

This policy applies to all RepProX services, infrastructure, employees, contractors, and third-party providers involved in delivering the Services.

1. Security Commitment

RepProX is committed to maintaining the confidentiality, integrity, and availability of customer information.

We employ commercially reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, destruction, or loss.

2. Cloud Infrastructure

RepProX is hosted on Amazon Web Services (AWS).

AWS provides enterprise-grade cloud infrastructure including:

Physical security controls
Network security controls
Environmental protection measures
Infrastructure redundancy
Disaster recovery capabilities

RepProX leverages AWS services to support secure and reliable service delivery.

3. Data Encryption

Data in Transit

All communications between users and RepProX are encrypted using industry-standard HTTPS/TLS protocols.

Data at Rest

RepProX utilizes commercially reasonable measures to protect stored information within cloud-hosted environments. Sensitive data may be encrypted where technically appropriate and feasible.

4. Access Control

Access to systems and customer information is restricted based on business need.

Security measures include:

User authentication
Role-based permissions
Account segregation
Administrative access restrictions
Access logging and monitoring

Users are responsible for maintaining the confidentiality of their credentials.

5. Password Security

RepProX requires secure password practices. Customers are encouraged to:

Use strong passwords
Avoid password sharing
Change compromised credentials immediately
Enable additional security controls when available

6. Application Security

RepProX employs security practices designed to reduce risks including:

Secure development practices
Controlled deployment processes
Vulnerability remediation
Security monitoring
Audit logging

Security controls are periodically reviewed and improved.

7. Network Security

RepProX maintains network protection measures including:

Firewall controls
Traffic filtering
Access restrictions
Security monitoring
Threat detection capabilities

8. Backup and Recovery

RepProX performs daily backup procedures designed to support business continuity.

Backup practices may include:

Database backups
Configuration backups
System recovery procedures

Backup retention periods may vary depending on operational requirements.

9. Incident Response

RepProX maintains procedures for identifying, investigating, and responding to security incidents.

In the event of a confirmed security incident, ALLE TECH will:

Assess the incident.
Contain potential risks.
Investigate root causes.
Implement corrective actions.
Notify affected customers where required by law.

10. Employee Responsibilities

Personnel with access to customer information are expected to:

Follow security procedures.
Protect confidential information.
Report security concerns promptly.
Comply with company policies.

Access is granted only where necessary to perform authorized responsibilities.

11. Third-Party Providers

RepProX may engage trusted third-party providers to support service delivery.

Third-party providers may include:

Cloud hosting providers
Monitoring providers
Integration partners
Support providers

Reasonable efforts are made to select reputable providers with appropriate security practices.

12. Business Continuity

RepProX maintains operational practices designed to support service continuity and recovery from unexpected disruptions.

Business continuity measures may include:

Backup procedures
Recovery planning
Infrastructure redundancy
Incident management processes

13. Customer Responsibilities

Customers remain responsible for:

User account management
Endpoint device security
Internal security policies
Employee awareness
Compliance with applicable laws

Security is a shared responsibility between RepProX and its customers.

14. Compliance

RepProX is designed to support customer compliance efforts; however, customers remain responsible for ensuring compliance with applicable regulations within their jurisdictions.

15. Policy Updates

This Security Policy may be updated periodically to reflect operational, legal, or technological changes.

Updated versions will be published at: https://www.repprox.com

16. Contact

Security Inquiries: security@repprox.com
ALLE TECH LLC FZ
Dubai, United Arab Emirates
https://www.repprox.com