Data Security

A risk-based approach

Security practices should be appropriate to the nature of the information and services in use. SunlightCorp should document the technical, organizational, and physical safeguards it actually operates before publishing specific control claims.

Protect your account and information

• Use unique, hard-to-guess passwords and keep them private.
• Keep your devices and browser up to date.
• Be cautious with unexpected messages asking for credentials or sensitive information.
• Contact us promptly if you suspect unauthorized access to an account or information.

Reporting a security concern

If you identify a possible vulnerability or security incident involving a SunlightCorp service, contact us with a description, the affected page or service, and steps to reproduce the issue when safe to do so. Do not access other people’s data, disrupt services, or publicly disclose a suspected issue before giving us a reasonable opportunity to investigate.

Limitations and incident response

No system or method of transmission is completely secure. SunlightCorp should maintain an incident response process, including appropriate assessment, remediation, and notifications where required by law. Do not treat this summary as a guarantee that an incident cannot occur.

Responsible disclosure contact

Please send security reports to security@sunlightcorp.in. Confirm that this inbox is monitored and add any preferred reporting process before publishing this address.