Security

We design and operate our services with security in mind, using layered controls across infrastructure, applications, and operations. No system is perfectly secure; we work continuously to reduce risk and respond to new threats.

We host our services on reputable cloud infrastructure with controls for network isolation, redundancy, monitoring, and operational resilience. Access to production environments is limited and logged according to least-privilege principles.

Access to customer data and production systems is restricted to authorized personnel who need it for their job (for example, support with your permission or engineering for maintenance). We use strong authentication and role-based access for internal tools.

We use industry-standard encryption for data in transit (such as TLS) and protect data at rest with encryption and key management practices appropriate to our environment. Exact implementations may evolve as technology improves.

We follow secure development practices including code review, dependency management, and vulnerability assessment appropriate to our release process. We aim to patch critical issues in a timely manner.

We maintain procedures to detect, investigate, and recover from security incidents affecting our services. If a breach materially affects personal data we process on behalf of users, we will notify affected parties and regulators as required by applicable law.

If you believe you have found a security vulnerability in our services, please report it responsibly. Do not perform testing that could harm users, degrade production systems, or access data that is not yours.

What to include in your report:

• A clear description of the issue and affected product or URL
• Steps to reproduce (if possible) and estimated severity
• Your contact information so we can follow up

Send reports to: hr@zopkit.com. We appreciate good-faith disclosures and will work with you to understand and address valid findings.

Our security controls are built to align with SOC 2 principles, and we provide GDPR-ready data handling — including data residency options and consent management controls — for customers operating in or serving the EU/EEA. Security is an ongoing process—we regularly review and improve controls as our services evolve, and we stay current with applicable legal requirements and industry expectations as our business scales.

General security inquiries: hr@zopkit.com

Address: Hi-Tech City, Hyderabad, India