Legal

Security

Last Updated: January 1, 2024

SSL Encrypted

All data in transit

MFA Required

All internal systems

Zero Data Selling

No third-party sales

Quelford Digital LLC treats client data and information security as operational infrastructure — not an afterthought. The following outlines our commitments and practices for maintaining a secure environment for all clients and stakeholders.

Data Transmission Security

All data exchanged between users and our website is encrypted using TLS (Transport Layer Security). We enforce HTTPS across all pages and services. Contact form submissions and file transfers use encrypted channels.

Access Control

Access to client accounts and internal systems follows strict role-based access control (RBAC). Only team members assigned to a client's account hold credentials. All third-party platform access is provisioned using the principle of least privilege.

Credential Management

  • All internal accounts use unique passwords managed through enterprise password vault software.
  • Multi-factor authentication (MFA) is mandatory for all internal systems.
  • Client credentials are never stored in plain text. Upon project completion, provided credentials are formally revoked and purged.

Responsible Disclosure

If you believe you have discovered a security vulnerability, please contact us at contact@quelforddigital.com. We commit to acknowledging valid reports within 48 business hours and working to remediate confirmed vulnerabilities promptly.

Incident Response

In the event of a confirmed security incident, Quelford Digital will notify affected clients within 72 hours, coordinate with legal counsel as required, and take immediate measures to contain and remediate the incident.

Contact

Quelford Digital LLC · 387 East Main Street, Tupelo, MS 38804 · contact@quelforddigital.com