How Privelos is protected

Privelos uses multiple independent protection layers. No single control or certification means risk is absent.

• Multi-factor authentication and time-limited, server-stored sessions
• Tenant isolation at service and database layers
• TLS, security headers, and least-privilege production containers
• Encrypted off-host backups with restore testing
• Audit records for access and protected changes
• Vulnerability, dependency, and authorisation testing before release

Report a security concern

Do not include passwords, authentication codes, sensitive personal data, or vulnerability details in an initial unencrypted message. Contact security@privelos.com.