Policy
Security Policy
This policy outlines how Altius Marine safeguards systems, data and customer information across our products and infrastructure.
1. Our Approach
Altius Marine treats security as a core engineering requirement, not an afterthought. Our systems, processes and third-party relationships are designed and reviewed with security as a first-class concern.
2. Data Protection
Customer data is encrypted in transit and at rest, with access strictly limited to personnel who require it to perform their role. See our Privacy Policy for how personal data specifically is handled.
3. Infrastructure Security
Our infrastructure is hosted with reputable cloud providers and protected by network segmentation, firewalls, intrusion detection and continuous monitoring.
4. Access Control
We enforce the principle of least privilege across our systems, with multi-factor authentication required for all internal access to production environments and customer data.
5. Vulnerability Management
We conduct regular security assessments, patch management and vulnerability scanning across our systems, and work with independent researchers through a responsible disclosure process.
6. Incident Response
We maintain an incident response process to detect, contain and remediate security events, and to notify affected customers in accordance with our contractual and legal obligations.
7. Reporting a Concern
If you believe you have discovered a security vulnerability in our systems, please report it responsibly to sheshadri@altiusmarine.com — we ask that you do not publicly disclose it until we have had the opportunity to investigate.
8. Changes to This Policy
We may update this Security Policy as our practices evolve. Material changes will be reflected by an updated "Last Updated" date at the top of this page.
Security is engineered in from the start — not bolted on. Every system we ship is built to this same standard, ship to shore.