Data security practices

At Vectors Hunt, the security of our clients’ data is the foundation of every service we provide. As a company specialising in cybersecurity, we follow practices and processes that protect information at every stage of cooperation – from the first contact, through delivery of the service, to the secure deletion of data once it ends.

1. Confidentiality and information protection

• All data shared with us – technical, business or personal – is treated as confidential.
• We apply the principle of least privilege – only people directly involved in delivering the service have access to the information they need.
• Communication with clients takes place only through encrypted channels (TLS/HTTPS, encrypted e-mail, security protocols).

2. Secure data processing

• Data analysed as part of our services (e.g. monitoring, malware analysis, asset scanning) is processed solely to carry out the commissioned work.
• Client information is not shared with third parties without explicit consent.
• All processes comply with the GDPR and industry best practices.

3. Data retention and deletion

• We keep data only for as long as necessary to deliver the service or as required by law.
• When cooperation ends, all materials provided by the client (files, logs, dumps, analysis results) are securely deleted from operating systems and working environments.
• We do not keep data longer than necessary.

4. Operational security

• Every stage of work – information gathering, threat analysis, monitoring, reporting – takes place in controlled, isolated and secured environments.
• Potentially malicious files are analysed in a dedicated, separated environment (sandbox).
• We regularly update our internal procedures to respond to new types of threats.

5. Staff security and competence

• Our staff take part in regular training in cybersecurity, data protection and safe handling of sensitive information.
• We follow internal security procedures and incident reporting rules.
• Everyone involved in a service is bound by confidentiality.

6. Transparency

• Clients can ask at any time how their data is processed.
• We inform clients without delay about any significant security events.

7. The highest protection standards

Our priority is to act in line with the best practices of the cybersecurity industry.

We design all processes according to the principles of:

• Privacy by Design
• Security by Design
• Zero-Trust Architecture
• Current guidelines and market best practices

This gives our clients confidence that their data is protected professionally and predictably.

Summary

Our data security practices are not just a document but a real part of our everyday work. We make sure every client – regardless of company size or scope of service – receives the highest level of information protection.