This page summarises the security posture and controls that apply to the ProkyuaFasta platform and the handling of data submitted through this website.
Transport & infrastructure security
- All traffic to this website and the ProkyuaFasta application is served over HTTPS.
- Production deployments use secure hosting with restricted administrative access, regular backups and system logging.
- A Content Security Policy and other secure HTTP headers are applied where feasible.
Application & data controls
- Role-Based Access — permissions are scoped to a user's responsibility within their organisation.
- Segregation of Duties — critical procurement actions (such as requisition, approval and payment) are separated between roles.
- Audit Trails — key decisions and changes are recorded and traceable.
- Data Protection — procurement and supplier information is protected in line with our Privacy Policy.
Form & submission security
- Public forms (such as Request a Demo) are validated on both the browser and the server before being processed.
- Automated anti-spam protection (a honeypot field client-side, with CAPTCHA or equivalent server-side protection in production) helps prevent abuse of public forms.
- No secrets, API keys or credentials are exposed in client-side code.
Reporting a security concern
If you believe you have found a security issue affecting this website or the ProkyuaFasta platform, please contact us at info@prokyuafasta.com so we can investigate promptly.