Security at Tekbees
Protecting our clients' data, especially the biometric and identity data processed by our UNICUS platform, is central to how we build and operate our products.
Information security management
Tekbees operates an Information Security Management System (ISMS) aligned with ISO/IEC 27001 and is working toward certification for the UNICUS platform. Our ISMS is led by Andres Lopez, CEO and ISMS Lead, who is accountable for information security across the company.
How we protect data
- Cloud infrastructure on AWS, with production isolated in its own account, separate from staging and development.
- Encryption of stored data with AWS KMS customer-managed keys, and encryption in transit with TLS.
- Continuous security monitoring with AWS Security Hub and Amazon Inspector.
- Regular security testing of our applications and infrastructure.
Reporting a vulnerability
If you believe you have found a security vulnerability in a Tekbees product or website, please email security@tekbees.com with a description of the issue, the affected URL or component, and the steps to reproduce it. We will acknowledge your report within 3 business days and keep you informed as we investigate.
When researching, please:
- Do not access, modify or delete data that does not belong to you beyond what is strictly necessary to demonstrate the issue.
- Do not perform denial-of-service, social engineering or physical attacks.
- Give us reasonable time to fix the issue before disclosing it publicly.
We do not currently run a paid bug bounty program. We will not pursue legal action against researchers who act in good faith and follow this policy.
Contact
Security team: security@tekbees.com
General inquiries: info@tekbees.com