Legal / Document

Security Policy

Document Reference: ZC-SP-2026-001|Version: 1.0|Effective: 11 May 2026

1. Security Principles

Security is foundational to Zencore. We utilize a multi-layered approach to protect our infrastructure, employee endpoints, and client data.

2. Access Control and Identity

We enforce strict access control based on the principle of Least Privilege.

MFA Mandatory: Required for all administrative and remote access.
Zero Trust: Identity verification required regardless of location.
Access Reviews: User rights reviewed quarterly.

3. Cryptography and Encryption

Data State	Minimum Standard	Application
Data in transit	TLS 1.2 minimum	HTTPS, APIs, Email
Data at rest	AES-256	Databases, Backups

4. Infrastructure Security

Our production environments are protected by Web Application Firewalls (WAF) and DDoS mitigation. We utilize network segmentation to isolate production, development, and corporate environments.

5. Business Continuity

Metric	Target
Recovery Time Objective (RTO)	4 hours for critical systems
Recovery Point Objective (RPO)	1 hour maximum data loss

6. Incident Response

Report suspected vulnerabilities or incidents to: sales@zencoreltd.com

We acknowledge reports within 48 hours.