Security Policy

1. Our Commitment

Napnix builds software for businesses that depend on reliable, secure systems. This policy describes the security measures we apply to our website, client projects, and products (Napnix CRM).

2. Website & Communication Security

• HTTPS/TLS encryption for all traffic to napnix.in.
• Security headers including HSTS, X-Frame-Options, and Content-Security-Policy where supported by our host.
• Google reCAPTCHA on public inquiry forms to reduce automated abuse.
• Separate mailboxes for info, sales, support, and admin to limit exposure of sensitive threads.

3. Application & Data Protection

• Passwords hashed using industry-standard algorithms; secrets stored in environment variables, not in source code.
• Role-based access control for admin and product dashboards.
• Encrypted telemetry payloads where analytics are collected.
• Regular dependency updates and security patches on active projects.
• Database backups for production systems with restricted access.

4. Infrastructure

We deploy on reputable cloud and hosting providers with network-level protections, automated TLS, and monitoring. Production environments are separated from development where feasible. Access to servers and databases is limited to authorized team members.

5. Incident Response

If we identify a security issue affecting client data, we investigate promptly, contain the impact, and notify affected clients as required by contract and applicable law. Report vulnerabilities responsibly to [email protected].

6. Compliance & Privacy

We design systems with data minimization and access controls in mind. For personal data handling, see our Privacy Policy and Cookie Policy. Enterprise clients may request additional security documentation during procurement.

7. Contact