Legal
Security
Last Updated: January 1, 2024
SSL Encrypted
All data in transit
MFA Required
All internal systems
Zero Data Selling
No third-party sales
Quelford Digital LLC treats client data and information security as operational infrastructure — not an afterthought. The following outlines our commitments and practices for maintaining a secure environment for all clients and stakeholders.
Data Transmission Security
All data exchanged between users and our website is encrypted using TLS (Transport Layer Security). We enforce HTTPS across all pages and services. Contact form submissions and file transfers use encrypted channels.
Access Control
Access to client accounts and internal systems follows strict role-based access control (RBAC). Only team members assigned to a client's account hold credentials. All third-party platform access is provisioned using the principle of least privilege.
Credential Management
- All internal accounts use unique passwords managed through enterprise password vault software.
- Multi-factor authentication (MFA) is mandatory for all internal systems.
- Client credentials are never stored in plain text. Upon project completion, provided credentials are formally revoked and purged.
Responsible Disclosure
If you believe you have discovered a security vulnerability, please contact us at contact@quelforddigital.com. We commit to acknowledging valid reports within 48 business hours and working to remediate confirmed vulnerabilities promptly.
Incident Response
In the event of a confirmed security incident, Quelford Digital will notify affected clients within 72 hours, coordinate with legal counsel as required, and take immediate measures to contain and remediate the incident.
Contact
Quelford Digital LLC · 387 East Main Street, Tupelo, MS 38804 · contact@quelforddigital.com