Data Security
Your data security is our top priority. We implement industry-leading measures to protect your personal information.
Security Commitment
ElefyMove employs multiple layers of security to protect your data from unauthorized access, use, or disclosure. Our security measures are regularly audited and updated to meet industry standards.
Technical Security Measures
Encryption
- In Transit: SSL/TLS encryption (HTTPS)
- At Rest: AES-256 encryption
- Passwords: bcrypt hashing (12 rounds)
- Payment Data: Never stored (PCI-DSS via Stripe / PayPal)
Authentication
- •Strong password requirements (8+ chars, mixed case, numbers)
- •JWT token-based authentication
- •Optional two-factor authentication (2FA)
- •Session timeout after inactivity
Access Control
- •Role-based access control (RBAC)
- •Principle of least privilege
- •Ownership verification for file access
- •Audit logs for sensitive operations
Network Security
- •Firewalls and intrusion detection
- •DDoS protection
- •Rate limiting to prevent brute force
- •Regular security scans
Organizational Security Measures
Access Audits
Periodic reviews of access permissions and user roles. Immediate revocation of access for departed employees.
Incident Response
Suspected incidents are investigated promptly and reported in line with PDPA requirements.
Third-Party Audits
Security posture reviewed on an ongoing basis.
Security Compliance
Data Breach Notification
In the unlikely event of a data breach, we have strict protocols in place:
What You Can Do
Security is a shared responsibility. Here's how you can protect your account:
Use Strong Passwords
- • At least 8 characters
- • Mix of upper/lowercase
- • Include numbers and symbols
- • Don't reuse passwords
Enable 2FA
Add an extra layer of security with two-factor authentication. Available in account settings.
Monitor Activity
Regularly review your account activity and login history for suspicious access.
Report Issues
Contact [email protected] immediately if you notice any unauthorized activity.