Dimensions Technologies
Security Policy.
Security
At Dimensions Technologies, protecting customer data and maintaining the security of our services is a core responsibility. We employ a range of technical, operational, and organisational measures to safeguard our systems and the information entrusted to us.
Our Security Principles
We design and operate our services with security in mind, focusing on:
- Confidentiality of customer data
- Integrity of systems and information
- Availability and resilience of services
- Continuous monitoring and improvement
- Compliance with applicable legal and regulatory requirements
Security Controls
Our security programme includes controls such as:
Access Management
- Role-based access controls
- Principle of least privilege
- Multi-factor authentication for administrative access
- Regular review of privileged accounts
Infrastructure Security
- Secure cloud-hosted infrastructure
- Network segmentation and firewall protection
- Security monitoring and logging
- Vulnerability and patch management processes
Application Security
- Secure software development practices
- Security testing during development and release cycles
- Protection against common web application vulnerabilities
- Dependency and third-party component management
Data Protection
- Encryption of data in transit using TLS
- Encryption of sensitive data at rest where appropriate
- Secure backup and recovery processes
- Data retention and disposal controls
Business Continuity
- Regular backups
- Disaster recovery procedures
- Service monitoring and incident response processes
Privacy and Compliance
Dimensions Technologies processes personal data in accordance with applicable data protection legislation, including the UK GDPR and Data Protection Act 2018.
For more information, please refer to our Privacy Policy.
Security Incident Response
We maintain documented procedures for identifying, assessing, responding to, and recovering from security incidents.
Where required by law or contractual obligations, affected customers will be notified of confirmed incidents within applicable timeframes.
Security Contact
If you have security-related questions or concerns, please contact:
Vulnerability Disclosure
We welcome responsible disclosure of security vulnerabilities.
Researchers and members of the public who identify potential security issues are encouraged to review and follow our Vulnerability Disclosure Policy.