Security Policy

Last updated: 27 July 2026

Overview

SPRL is committed to maintaining a secure, reliable, and resilient platform for customers, partners, developers, and enterprise organisations. We implement administrative, technical, and operational safeguards designed to protect our products, services, infrastructure, and customer information from unauthorised access, misuse, alteration, disclosure, and disruption.

While no online service can guarantee absolute security, SPRL continually evaluates and improves its security practices to reduce risk, respond to emerging threats, and support the ongoing security of our platform.

This Security Policy provides an overview of our security principles and practices. It should be read together with our Privacy Policy, Terms of Service, Acceptable Use Policy, and other applicable SPRL policies.

1. Scope

This Policy applies to all SPRL websites, applications, APIs, customer dashboards, communication services, cloud infrastructure, and other products and services operated by SPRL.

It also applies to employees, contractors, authorised service providers, and other parties who support the operation and maintenance of SPRL Services where appropriate.

2. Security Principles

Our security programme is guided by the following principles:

• protect customer information and platform integrity;
• maintain the confidentiality, integrity, and availability of our services;
• identify, assess, and reduce security risks on an ongoing basis;
• respond promptly to security incidents and emerging threats;
• continuously improve our security practices and operational controls.

3. Shared Responsibility

Security is a shared responsibility between SPRL and our customers.

SPRL is responsible for protecting the security of the platform and the services we operate. Customers are responsible for protecting their own accounts, devices, credentials, applications, and any data or content they manage using SPRL Services.

Customers are encouraged to:

• use strong and unique passwords;
• enable Multi-Factor Authentication (MFA) where available;
• protect API keys and access credentials;
• keep devices and software up to date;
• promptly report suspected security incidents or unauthorised account activity.

4. Continuous Security Improvement

Security threats continue to evolve, and SPRL regularly reviews its policies, procedures, infrastructure, and operational practices to improve the protection of our platform and customers.

Our security practices may be updated from time to time to reflect changes in technology, industry standards, legal requirements, operational experience, and emerging cybersecurity risks.

5. Account Security

SPRL implements reasonable security measures to help protect customer accounts and reduce the risk of unauthorised access.

Customers are responsible for maintaining the confidentiality of their account credentials and for all activities performed using their accounts.

Customers should:

• use strong, unique passwords for their SPRL account;
• enable Multi-Factor Authentication (MFA) where available;
• keep recovery information up to date;
• avoid sharing login credentials with unauthorised persons;
• notify SPRL immediately if they suspect unauthorised account access.

6. Data Protection

SPRL implements appropriate administrative, technical, and operational safeguards designed to protect customer information against unauthorised access, disclosure, alteration, or destruction.

Security controls are regularly reviewed and updated as part of our ongoing efforts to maintain the confidentiality, integrity, and availability of customer information and platform services.

7. Infrastructure Security

SPRL takes reasonable measures to protect the infrastructure that supports our products and services.

These measures may include:

• network and infrastructure monitoring;
• secure configuration management;
• access controls for production systems;
• system logging and operational monitoring;
• regular software updates and security patches;
• security measures designed to protect platform availability and integrity.

8. Application Security

Security is considered throughout the development and operation of SPRL products and services.

Where appropriate, our development and operational practices may include:

• secure software development practices;
• input validation and output handling;
• authentication and authorisation controls;
• dependency and software update management;
• security testing as part of product improvements;
• ongoing monitoring for security issues.

9. Monitoring and Threat Detection

SPRL monitors its platform and services to help identify operational issues, suspicious activity, security events, and potential threats.

Monitoring information may be used to:

• detect unauthorised access attempts;
• identify abuse or malicious activity;
• protect customer accounts;
• maintain platform reliability;
• support incident investigation and response.

Monitoring activities are conducted in accordance with applicable laws and our Privacy Policy.

10. Backup and Business Continuity

SPRL maintains operational procedures intended to support service continuity and recovery from unexpected events.

Where appropriate, backups and recovery processes are maintained to help protect platform operations and support the restoration of services following hardware failures, software issues, or other operational incidents.

Customers remain responsible for maintaining copies of their own important information where appropriate, as no backup or recovery process can guarantee the preservation of all customer data under every circumstance.

11. Security Incident Response

SPRL maintains procedures for identifying, assessing, responding to, and managing security incidents that may affect our platform, customers, or services.

When a security incident is identified, we aim to:

• contain and mitigate the impact of the incident;
• investigate the cause and scope of the event;
• restore affected services where reasonably practicable;
• implement corrective measures to reduce the likelihood of recurrence;
• comply with applicable legal and regulatory notification requirements.

12. Vulnerability Management

SPRL continuously works to identify and address security vulnerabilities affecting our products, services, and supporting infrastructure.

Our security practices may include:

• regular review of security risks;
• timely application of security updates and patches where appropriate;
• monitoring for newly disclosed vulnerabilities;
• evaluating security improvements as technology and threats evolve.

13. Third-Party Services

SPRL may rely on trusted third-party providers to support the delivery of certain products and services, including cloud infrastructure, payment processing, communications, analytics, and other operational functions.

While we carefully select service providers, their services operate under their own security practices and contractual obligations. SPRL cannot guarantee the security, availability, or performance of third-party systems beyond our reasonable control.

Where appropriate, we evaluate third-party providers based on factors including security, reliability, compliance, and operational suitability.

14. Customer Security Responsibilities

Customers play an important role in protecting their own accounts and information while using SPRL Services.

Customers should:

• protect account credentials and API keys;
• enable Multi-Factor Authentication (MFA) where available;
• regularly review account activity;
• keep connected devices and software updated;
• avoid sharing sensitive credentials through insecure channels;
• immediately report suspected unauthorised access or security incidents.

Failure to follow reasonable security practices may increase the risk of unauthorised access to customer accounts or data.

15. Reporting Security Issues

If you believe you have discovered a security vulnerability or identified suspicious activity affecting SPRL Services, we encourage you to report it to us promptly.

When reporting a security issue, please provide sufficient information to help us investigate, including:

• a description of the issue;
• the affected service or functionality;
• steps to reproduce the issue, where applicable;
• screenshots, logs, or other supporting information where available.

SPRL appreciates responsible disclosure and will investigate credible security reports in accordance with our internal security procedures.

16. Policy Updates

SPRL may update this Security Policy from time to time to reflect changes in our products, services, security practices, technology, legal requirements, or operational procedures.

The latest version of this Policy will always be published on this page together with the last updated date.

Your continued use of SPRL Services after an updated Security Policy becomes effective constitutes your acceptance of the revised Policy.

17. Contact Us

If you have questions regarding this Security Policy or wish to report a security concern affecting SPRL Services, please contact us using our official support channels.

Security Reports: https://insprl.com/trust-and-safety/report-abuse
Email: [email protected]
General Support: [email protected]
Website: https://insprl.com

18. Acceptance of this Policy

By accessing or using SPRL websites, applications, APIs, customer dashboards, and other products or services, you acknowledge that you have read and understood this Security Policy.

This Policy forms part of the SPRL Legal Centre and should be read together with our Terms of Service, Privacy Policy, Acceptable Use Policy, Abuse Reporting Policy, and other applicable SPRL policies.