Security

• //The site uses HTTPS/TLS to protect data in transit
• //The staff administration area requires an authenticated account and a separately assigned administrator role
• //Access is limited according to operational need
• //Staff and contractors are expected to protect confidential information
• //Service providers are selected with security and data-protection obligations in mind

We investigate suspected incidents and keep appropriate records. Where UK data-protection law requires it, we notify the Information Commissioner's Office within 72 hours of becoming aware of a reportable breach and notify affected people without undue delay where the risk is high.

Use strong, unique passwords, keep devices updated and be alert to phishing. We will never ask for your password by email. Genuine company emails use @evdopes.email; if in doubt, contact us through the site.

Email security@evdopes.email with details and reproducible steps. Act in good faith; access no more data than needed; do not change or delete data; do not use social engineering, physical attacks or denial of service; and allow reasonable time for a fix before public disclosure.

We will acknowledge responsible reports promptly and will not pursue legal action against researchers who follow this policy in good faith. Machine-readable reporting details are available at https://www.evdopes.group/.well-known/security.txt.

Security reports: security@evdopes.email. Postal contact: EVDOPES LTD at the registered office shown above.