Security Policy

Last updated: October 28, 2026

1. Commitment to Security

At Synthron AI Technologies, securing the HR, payroll, and CRM data hosted on Operon is our highest priority. This policy outlines our technical and organizational security measures.

2. Data Protection & Encryption

All data transmitted between client devices and the Operon servers is protected using TLS 1.2+ Encryption. Sensitive data, including passwords and biometric templates, are encrypted at rest using industry-standard hashing and encryption algorithms.

3. Authentication & Password Storage

Passwords are never stored in plaintext. We utilize secure Password Storage techniques involving strong cryptographic hashing (e.g., bcrypt) combined with unique salts. JWT-based authentication is used to secure active sessions.

4. Access Controls & Employee Access

We enforce strict, role-based Access Controls. Operon customers can finely tune permissions for their own staff. Internally, our Employee Access to production databases is strictly limited on a principle of least privilege, requiring MFA and VPN gateways.

5. Logging & Monitoring

Comprehensive application Logging is implemented to record administrative actions and API requests. Continuous server Monitoring ensures rapid detection of anomalous activities, unauthorized access attempts, or performance bottlenecks.

6. Backups

We perform automated daily Backups of all production databases. Backups are stored in geographically redundant locations and are routinely tested for restoration integrity to prevent data loss in disaster scenarios.

7. Incident Response

In the event of a security incident, our Incident Response team follows a documented protocol to contain, investigate, and remediate the threat. Affected customers will be notified in accordance with our Data Processing Agreement.

8. Vulnerability Management

We conduct regular dependency audits, code reviews, and Vulnerability Management scanning to proactively identify and patch potential software flaws before they can be exploited.