Security & Data Protection
Protecting information is an important part of operating DLYTE. We are reviewing and strengthening our security and privacy practices as the platform develops.
Our Security Practices
DLYTE uses application security controls and is reviewing their coverage and effectiveness. The following describes selected measures, not a guarantee that every security risk has been eliminated.
Password-based accounts use hashed passwords, and the public website uses HTTPS. We are reviewing storage and credential-handling practices across the platform and do not claim that every category of stored information has the same protections.
DLYTE runs as a hosted web application with a server and database. Server-side authentication and permission checks are used to control access to platform features. We are reviewing their coverage and effectiveness.
Server-side configuration uses environment variables for service credentials. We are reviewing credential storage, access and logging practices to reduce the risk of unintended disclosure.
DLYTE uses server-side sessions and HTTP-only cookies configured for HTTPS in production. Sessions have configured expiry periods. We are reviewing inactivity handling and server-side enforcement.
Security & Compliance
DLYTE is actively reviewing and strengthening its information security, privacy and data protection practices, with reference to recognised industry standards, including ISO 27001. We are identifying areas for improvement and implementing appropriate safeguards as our platform develops. DLYTE does not currently hold independent ISO 27001 certification or a SOC 2 Type II attestation.
Network availability and security depend on the hosting services and application configuration. We are reviewing those dependencies and do not guarantee uninterrupted availability or protection from every attack.
Application dependencies and server configuration require ongoing maintenance. Identified issues are assessed for appropriate updates. Updates do not guarantee that all vulnerabilities have been removed or that maintenance will be disruption-free.
Privacy Practices
We are reviewing how information is collected, used, shared and retained across the platform:
Data collection — we are reviewing what information is collected and why it is needed.
Data use and sharing — operating DLYTE involves sharing relevant information with research customers and service providers.
Access controls — server-side authentication and permission checks are used to control access; their coverage is under review.
Participant information — we are reviewing how tester profile information and research data are accessed and disclosed.
Data Location & Storage
DLYTE uses hosted database and file-storage services. Storage locations and protections depend on the service and its configuration; we are reviewing these arrangements.
Contact us to discuss storage locations and infrastructure requirements. We will confirm the details we can substantiate for your assessment.
Vulnerability Management
Security reviews and testing help identify risks in application code, dependencies and configuration. Findings require prioritisation, remediation and verification.
A completed review does not mean that every issue has been resolved or that DLYTE has received independent certification.
Responsible Disclosure
If you believe you've found a security issue, we encourage responsible disclosure. so our team can review your report.
Ready for Your Security Checklist
If your organization uses a security questionnaire, procurement checklist, or vendor assessment, we can discuss the following topics and confirm which supporting information is available:
Let us know what you need. We will confirm which information is available and whether any requirements remain unmet.