Security and data protection

Last updated: 13 October 2026

We are a small team, so we keep our security practices simple, practical and honest. Here is what we do, and what we do not claim.

1. How we handle your data

• Our website and the products we deploy use HTTPS.
• We collect only the information we need and keep it only as long as we need it, as described in our Privacy Policy.
• Access to client information is limited to the people working on your project.
• We are happy to sign a mutual non-disclosure agreement before you share sensitive material.

2. Accounts and access

• We use multi-factor authentication on our company email, code hosting and cloud accounts.
• We ask for the minimum access needed, through invited or delegated accounts rather than shared passwords, and we remove access when the work ends.
• Secrets such as API keys are kept in environment settings or a secrets manager, not in source code.

3. Secure engineering

• Code is kept in version control, reviewed, and tested before release.
• We build with the common web security risks in mind, such as those on the OWASP Top 10 list, and check for them before launch.
• We keep dependencies up to date and fix known vulnerabilities in the products we maintain for you.
• Backups and hosting arrangements for your product are agreed with you in the project plan.

4. If something goes wrong

If we become aware of a security incident that affects your data, we will tell you without undue delay, explain what happened and what we are doing about it, and help you meet any notification duties you have. We aim to inform affected clients within 72 hours of confirming a breach.

5. AI tools

Our rules for using AI tools with client data are in our AI Usage Policy.

6. What we do not claim

We are an independent software company and do not currently hold formal certifications such as ISO 27001 or SOC 2. If your organisation needs a security questionnaire, a data processing agreement or specific controls, tell us at the start and we will confirm in writing what we can and cannot commit to.

7. Reporting a vulnerability

If you find a security issue on our website, please email enquiries@blackjokeralien.com with the subject "Security report" and enough detail to reproduce it. Please do not access other people's data or disrupt the service while testing. We will acknowledge your report within 3 business days.

BlackJoker Alien Technologies
Kanchanjanga Market, Noida Sec-53, Uttar Pradesh, India 201301
Email: enquiries@blackjokeralien.com
Phone and WhatsApp: +91 7011324475
Monday to Saturday, 9:00 AM to 7:00 PM IST