Policies

Scrumlin Technology Pvt. Ltd. treats security as part of delivery — not an afterthought. This page summarises how we approach website, product, and engagement security. Contractual controls for a specific project are defined in that engagement’s documents.

Website and hosting

The public site is served over HTTPS. Administrative access is limited to authorised personnel with role-based permissions. Uploaded media is stored on controlled storage with size and type checks.

Delivery practices

For client work we typically apply access control, environment separation, secure coding reviews, dependency hygiene, and least-privilege credentials matched to project risk. Cloud and infrastructure choices follow the agreed architecture.

Personal data

Enquiry forms and profiling records are used only to respond to you and operate the business, as described in the Privacy Policy. We do not sell personal data.

Incidents

If we become aware of a security incident that affects your personal data or a live engagement, we will investigate, contain, and notify affected parties as required by law and contract.

Reporting a concern

If you believe you have found a vulnerability on scrumlin.com or in a Scrumlin-hosted demo, please contact us through the Contact page with enough detail for us to reproduce the issue. Do not access other customers’ data or disrupt services.

Last updated: 19 August 2026.