Legal

Last updated

Every legal document for this website in one place, how to get our Data Processing Agreement, and how to tell us about a security issue.

In short

  • Four documents cover this website: terms of use, privacy, cookies and accessibility.
  • Customers can ask for our Data Processing Agreement.
  • Found a security issue? Please report it to us privately.

Documents

  • Terms of useWhat you may do with this website, what we own, and our liability.
  • Privacy policyWhat the website collects, why, who handles it, and your rights.
  • Cookie policyNo cookies. Every item the website keeps in your browser, and why.
  • Accessibility statementHow the website meets IS 5568 and WCAG 2.2 AA, its known limits, and who to contact.

Data Processing Agreement

When a customer's personal data passes through the Fortress Cyber platform, we process it on that customer's behalf. Our Data Processing Agreement (DPA) sets out how we do that, following Article 28 of the GDPR and Israel's Privacy Protection (Data Security) Regulations, 2017.

It is available on request: write to TODO: DPA request email.

Subprocessors

For this website

These providers handle personal details from the website, each only for its part and on our instructions:

  • Vercel: Hosts the website and runs the code that receives the contact form. (privacy terms)
  • Cloudflare: Runs Turnstile, the spam check on the contact form. (privacy terms)
  • Mailtrap: Delivers what you send through the form to our inbox as an email. (privacy terms)
  • Microsoft: Holds that email in our Microsoft 365 business mailbox. (privacy terms)

For the Fortress Cyber platform

TODO: the platform's subprocessors: name, what each does, and where it processes data

Reporting a security issue

If you believe you have found a security weakness in this website or in the platform, please tell us privately at TODO: security contact email, so we can fix it before anyone can misuse it. Our security.txt file has the same contact for automated tools.

  • Tell us what you found and how to reproduce it.
  • Give us reasonable time to fix it before you share it with anyone else.
  • Don't access, change, keep or share data that isn't yours, and stop as soon as you have shown the issue.
  • Don't run tests that could slow the service down or harm the people who use it, such as denial of service.

We will confirm that we received your report and keep you informed while we work on it.