Trust centre
How we protect this website and the data you share with us. We only list what is true today, what we are building, and what we haven't decided yet.
In place
In place on this website now
- In place: Served over HTTPS only, with HSTS telling browsers never to connect without encryption
- In place: Security headers that stop the site being framed by other sites, block content-type guessing, limit what is shared when you follow a link, and switch off camera, microphone and location access
- In place: No advertising or analytics cookies, and no tracking across other sites
- In place: Enquiry forms checked on the server, sent only with your agreement, and protected against bots and repeated submissions
- In place: Hosted on Vercel
Being built
Being built into the Biaz Labs platform
These are requirements the platform has to meet before any client uses it. They are not live yet.
- Being built: Multi-factor login required for anyone with admin access
- Being built: Each organisation and business sees only its own data, enforced in the database
- Being built: Secrets kept out of the code and out of the browser, with separate keys for testing and live use
- Being built: An audit log of sensitive actions, with passwords, tokens and full payment details never logged
- Being built: Card details never stored, and payment and messaging webhooks verified
- Being built: Backups, with restore tested before going live
- Being built: An independent security review of the Full Digitization platform before its first live client
Not decided
Not decided yet
We'll publish these here once they're settled, rather than promise them early.
- Not decided: How we respond to a security incident, and when we tell affected clients
- Not decided: The data terms of the AI providers we use, including retention and where data is held
- Not decided: How long we keep personal data, under Botswana's data protection law
- Not decided: Who carries out the independent security review
Report a security problem
If you think you've found a security problem with this website or anything Biaz Labs runs, email us and put "Security" in the subject. Please don't test in ways that could affect other people's data or access.