TITCOLOMBIA S.A.S. applies security practices proportionate to each AccessTo implementation's functions, architecture, configuration and risks. This policy describes our general approach; it is not a certification and does not promise identical controls for every product.
1. Scope and responsibilities
Scope includes web services, PWAs, apps, integrations and support operated by TITCOLOMBIA. Unless agreed otherwise, customers are responsible for their devices, networks, facilities, accounts, permissions, submitted data and workspace configuration. Measures vary by product and hosting.
2. Protection practices
Depending on the service, we may use role permissions, authentication, audit, change management, backups, updates, monitoring and communications protection. Encryption, location, redundancy, log retention and recovery depend on the specific architecture and configuration. We do not claim every connection uses a specific cryptographic version or universal independent certification.
3. Incidents
We assess and manage events under our procedures and contractual and legal duties. Where required, we notify customers or authorities within applicable deadlines using available information. Customers should keep a current security contact and report incidents that may affect the service.
4. Vulnerability reporting
Email seguridad@accesstoapp.com with reproduction steps, impact, URL/component and a safe response channel. Use test data; do not send real personal data or secrets. Test only systems you own or are authorized to assess. Do not degrade services, access others' data or publish details before coordinating a fix. We will acknowledge and coordinate reasonably; no fixed deadline or reward is promised.
5. Access and contact
Data access is limited by role, operational need, agreement and law. We may share data with providers and authorities under valid legal duties, consistent with the privacy notice and agreements. Questions: soporte@accesstoapp.com; vulnerabilities: seguridad@accesstoapp.com.