Data Security
Your data security is our top priority. We implement industry-leading measures to protect your personal information.
Security Commitment
ElefyMove employs multiple layers of security to protect your data from unauthorized access, use, or disclosure. Our security measures are reviewed and updated over time.
Technical Security Measures
Encryption
- In Transit: SSL/TLS encryption (HTTPS)
- At Rest: AES-256 encryption
- Passwords: bcrypt hashing (12 rounds)
- Payment Data: Never stored (PCI-DSS via Stripe / PayPal)
Authentication
- •Minimum 8-character passwords, stored as bcrypt hashes
- •JWT token-based authentication
- •Two-factor authentication available for staff accounts
- •Session timeout after inactivity
Access Control
- •Role-based access control (RBAC)
- •Principle of least privilege
- •Ownership verification for file access
- •Audit logs for sensitive operations
Network Security
- •Firewalls, audit logging and alerting
- •DDoS protection
- •Rate limiting to prevent brute force
- •Security headers and HTTPS-only connections (HSTS)
Organizational Security Measures
Audit Logging
Sensitive administrative actions are recorded in audit logs.
Incident Response
Suspected incidents are investigated promptly and reported in line with PDPA requirements.
Security Reviews
Security posture reviewed on an ongoing basis.
Security Compliance
Data Breach Notification
In the unlikely event of a data breach, we have strict protocols in place:
What You Can Do
Security is a shared responsibility. Here's how you can protect your account:
Use Strong Passwords
- • At least 8 characters
- • Mix of upper/lowercase
- • Include numbers and symbols
- • Don't reuse passwords
Use 2FA on Your Email
You sign in and recover your account with your email address, so turn on two-factor authentication with your email provider.
Monitor Activity
Watch for unexpected booking, payment or sign-in emails and report anything suspicious.
Report Issues
Contact [email protected] immediately if you notice any unauthorized activity.