01 / CORPORATE INFORMATION
Protected administration
The company workspace requires an administrator login. Passwords are stored as hashes rather than readable passwords. Login attempts are limited and inactive administrator sessions expire. Team-directory records do not grant administrator access.
02 / CORPORATE INFORMATION
Forms and uploads
Enquiry and application forms validate required fields, use anti-forgery tokens and include measures to limit repeated submissions. Resumes are limited to PDF or DOCX, subject to server support and file validation. Resume downloads require authenticated administrator access.
03 / CORPORATE INFORMATION
Access to information
Enquiries and application records are held in the website database. Uploaded resumes are held outside the public website folder. Authorised administrators review submissions and record internal notes. Public pages do not provide a candidate-directory or resume-search service.
04 / CORPORATE INFORMATION
Use the right channel
Send security concerns privately to hello@vaarada.com with the subject “Website security report”. Keep the report limited to the information needed to understand the issue. Follow the Responsible Disclosure page for what to include.
05 / CORPORATE INFORMATION
Hosting and deployment
BigRock is the confirmed production hosting provider. Security also depends on hosting configuration, software maintenance and administrator access. Check that the production website uses HTTPS before submitting personal information. Service-specific security requirements are agreed as part of the relevant engagement.