IN SHORT
Data is encrypted in transit and at rest, access is role-based with two-factor authentication, and we welcome responsible disclosure.
1. Controls
TLS everywhere, encrypted databases and backups, row-level security isolating each buyer’s data, TOTP 2FA for staff, least-privilege roles, full audit log of human and agent actions.
2. Reporting a vulnerability
Email security@gigasourcingbd.com (see /.well-known/security.txt). Please give us 90 days to fix before public disclosure. We do not pursue good-faith researchers.
3. Incident response
We notify affected buyers and, where required, regulators within 72 hours of confirming a personal-data breach.
Questions about this document: legal@gigasourcingbd.com · Giga Sourcing Ltd, Suite A9, Level 9, 889 Bashundhara Apollo Link Road, Dhaka 1229, Bangladesh.