Legal
Security Policy
Effective date: 17 May 2026 | Last updated: 17 May 2026
1. Security Model
Vinctura applies layered controls across authentication, authorization, transport security, and storage access boundaries.
2. Access Control
Access to account and business data is restricted by authenticated user identity, role permissions, and team membership checks.
3. Storage and Processing
Documents and records are stored in managed infrastructure with signed access flows and platform-level policy controls.
4. Incident Handling
Vinctura investigates security incidents, limits impact, and performs remediation and communication steps based on severity and legal obligations.
5. Security Reporting
To report a vulnerability or suspected incident, contact security@vinctura.co.za with reproducible detail.