Security Policy

Lonarx.us implements industry-standard security controls to protect personal and business data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols
• Encryption of sensitive data at rest using AES-256 or equivalent standards
• Access controls and role-based permissions to limit data access to authorized personnel only
• Regular security audits and vulnerability assessments
• Secure data storage practices with trusted cloud infrastructure providers

We maintain robust network security practices to protect our systems and your data:

• Firewalls and intrusion detection/prevention systems to monitor and control network traffic
• Regular patching and updates of all software, operating systems, and dependencies
• Continuous monitoring of network activity for suspicious behavior
• Segmentation of internal networks to limit exposure in the event of a breach

Our web applications and client-facing tools are developed and maintained with security in mind:

• Secure coding practices following OWASP guidelines
• Regular penetration testing and code reviews
• Input validation and output encoding to prevent common vulnerabilities such as SQL injection and cross-site scripting (XSS)
• Secure authentication mechanisms including multi-factor authentication (MFA) for internal systems

Where we engage third-party vendors or platforms (such as advertising networks, analytics providers, or hosting services), we:

• Conduct due diligence to ensure they meet acceptable security standards
• Share only the minimum data necessary to perform the required function
• Ensure contractual obligations require vendors to maintain appropriate security measures

In the event of a security incident or data breach, Lonarx.us will:

• Promptly investigate and contain the incident
• Assess the scope and impact of any data exposure
• Notify affected individuals and/or regulatory authorities as required by applicable law
• Take corrective measures to prevent recurrence

To report a suspected security incident or vulnerability, please contact us immediately at info@lonarx.us

All Lonarx.us employees and contractors are expected to:

• Complete security awareness training upon onboarding and annually thereafter
• Adhere to our internal data handling and acceptable use policies
• Use strong, unique passwords and multi-factor authentication for all work systems
• Report suspected security incidents or policy violations promptly

Where applicable, physical access to systems and data is controlled through:

• Restricted access to server rooms and data processing facilities
• Use of reputable, SOC 2-compliant cloud infrastructure and data centers
• Secure disposal of hardware and media containing sensitive information

Cookies and tracking technologies used by Lonarx.us are implemented in accordance with our Cookie Policy. We ensure tracking technologies are regularly reviewed and that data collected via such tools is handled securely and not shared beyond the purposes stated in our Privacy Policy.

This Security Policy may be updated from time to time to reflect improvements in our security practices or changes in applicable requirements. The effective date at the top of this document will be updated accordingly. Continued use of the Site constitutes your acceptance of the current policy.

If you have questions about our security practices or wish to report a vulnerability, please reach out: