Security at Abeeba.

Our practices

• Access control. Named, time-limited, client-approved access with multi-factor authentication
• Data handling. Client data stays in client environments; we do not copy it to our systems
• Secure development. Peer review, secret scanning and dependency scanning on all code we write
• Device security. Encrypted, managed laptops with automatic updates for all staff
• Vendor review. Third-party tools are reviewed before use with client work

For compliance status and documentation, visit the Trust Center.

Responsible disclosure

If you believe you have found a security vulnerability in an Abeeba website or system, please email security@abeeba.online with a description, steps to reproduce and any proof of concept.

• Give us reasonable time to fix the issue before disclosing it publicly.
• Do not access, modify or delete data that is not yours.
• Do not run denial-of-service tests, social engineering or physical attacks.
• Test only systems owned by Abeeba, never client systems.

We will acknowledge your report within three business days, keep you informed, and credit you publicly if you wish once the issue is resolved.