Security and Data Protection

We guard your data
like our own

Our team holds international and national security certifications. Safeguards are specified in the contract.

Why It Matters

Your website holds customer data, orders and payment records.

One leak costs you
their trust.

Most brands have no dedicated IT staff. Bonmipang makes protection part of the daily routine, not a clean-up after something goes wrong.

Defense in Depth

Eight layers
protecting your data

01
Encrypted everywhere
Every site runs on HTTPS, with browser security headers turned on
02
Common attacks blocked
Protection against SQL injection, cross-site scripting and cross-site request forgery
03
Limited login attempts
Admin logins are rate-limited, and unusual logins are logged
04
One account per person
No shared admin accounts; admin and standard permissions are kept separate
05
No keys in the code
Passwords, keys and other sensitive settings are stored separately
06
Automatic daily backups
The last 30 days are kept, so we can restore to any day if needed
07
Regular updates
We track security advisories and schedule updates when a vulnerability is found
08
A plan for incidents
How security and personal-data incidents are reported and handled is set in advance

Certifications

Team members hold international and national security certifications

International certification Certified Ethical Hacker EC-Council Valid
International certification Certified Cybersecurity Technician EC-Council Valid
National certification Information Security Engineer (Intermediate) Ministry of Economic Affairs, Taiwan Valid

Your Data

If you’d rather not use the cloud, the system can run on your company’s own servers

Wherever an outside AI service is involved, you decide how your data is used

When our work together ends, you can export all your data. No platform lock-in.

For Procurement

If your procurement process needs a security review or supporting documents, just let us know