Security Policy

Last updated August 14, 2026
Algomizer ("Algomizer", "Company", "we", "us", or "our") takes the security of our systems, our Services, and the information entrusted to us seriously. This Security Policy describes, at a high level, the safeguards we maintain and the responsibilities shared between us and our clients.

This Policy is provided for informational purposes, describes our practices as they may evolve over time, and does not create any warranty, representation, contractual commitment, or service-level obligation. In the event of any conflict, our Terms of Service govern.

1. Our security program

We maintain an information-security program that includes administrative, technical, and physical controls designed to be appropriate to the nature and sensitivity of the information we handle and the size and complexity of our operations. Our program is reviewed periodically and updated as we deem appropriate.

2. Technical and organizational measures

The measures we employ may include, without limitation:

• Encryption of data in transit using industry-standard protocols (e.g., TLS), and encryption of data at rest where appropriate;
• Access controls based on the principles of least privilege and need-to-know, with authentication and, where appropriate, multi-factor authentication;
• Network protections, logging, and monitoring designed to detect and respond to anomalous activity;
• Use of reputable infrastructure and sub-processors that maintain recognized security certifications or attestations;
• Secure software-development practices, including code review and dependency management; and
• Employee and contractor confidentiality obligations and security awareness practices.

3. Data handling and sub-processors

We limit access to client information to personnel and sub-processors who require it to perform the Services, and we impose contractual confidentiality and security obligations on our sub-processors. We use trusted third-party infrastructure providers to host and process data.

4. Incident response

We maintain procedures designed to identify, investigate, and respond to security incidents. In the event of a security incident affecting your information, we will take reasonable steps to mitigate the incident and will notify affected parties where and as required by applicable law.

5. Shared responsibility

Security is a shared responsibility. You are responsible for safeguarding the credentials and access you provide to us, for maintaining the security of your own systems and accounts, for granting access on a least-privilege basis, and for promptly revoking access that is no longer needed. You agree to promptly notify us of any suspected compromise of credentials or unauthorized access.

6. Responsible disclosure

We welcome reports from security researchers. If you believe you have discovered a security vulnerability in our Services, please report it to security@algomizer.com with sufficient detail to reproduce the issue. We ask that you act in good faith, avoid privacy violations and service disruption, and refrain from accessing or modifying data that is not your own.

We ask that you give us a reasonable opportunity to investigate and remediate before any public disclosure. We will make reasonable efforts to acknowledge validated reports. This Policy does not authorize any action that would violate applicable law.

7. No warranty

While we strive to protect information using commercially reasonable measures, no system or transmission method is completely secure, and we cannot and do not guarantee absolute security. To the maximum extent permitted by law, we disclaim liability for unauthorized access, use, or disclosure that occurs despite the safeguards described herein, as further set out in our Terms of Service.

8. Contact

To report a security concern or ask a question about this Policy, contact security@algomizer.com, or write to Algomizer, 5307 Victoria Drive #997, Vancouver, British Columbia V5P 3V6, Canada.