Security

Our Commitment

At Richland Technology, security is foundational to everything we build. We implement industry-leading practices to protect our clients’ data, systems, and intellectual property throughout every engagement.

Infrastructure Security

• All production systems are hosted on enterprise-grade cloud platforms with SOC 2 Type II compliance.
• Data is encrypted at rest (AES-256) and in transit (TLS 1.3).
• Network access is restricted through firewalls, VPCs, and least-privilege IAM policies.
• Regular infrastructure vulnerability scanning and patching schedules.

Application Security

• Secure development lifecycle (SDLC) integrated into all projects.
• Code reviews and static analysis on every pull request.
• Dependency vulnerability scanning with automated alerts.
• Input validation, parameterised queries, and OWASP Top 10 mitigation as standard.
• Regular penetration testing on client-facing applications.

Data Protection

• Strict data classification and handling procedures.
• Access to client data limited to authorised personnel on a need-to-know basis.
• All team members bound by confidentiality agreements.
• Data retention policies aligned with Australian Privacy Act requirements.
• Secure data disposal procedures for completed engagements.

Authentication & Access Control

• Multi-factor authentication (MFA) enforced across all internal systems.
• Role-based access control (RBAC) with regular access reviews.
• Single sign-on (SSO) integration for enterprise clients.
• Session management with automatic timeout and token rotation.

Incident Response

We maintain a documented incident response plan that includes:

• 24-hour initial response time for reported security incidents.
• Clear escalation paths and communication protocols.
• Post-incident analysis and remediation procedures.
• Client notification within 72 hours of confirmed data breaches, as required by the Notifiable Data Breaches scheme.

Business Continuity

• Automated backups with geographically distributed redundancy.
• Disaster recovery plans tested and updated regularly.
• High-availability architecture for critical client systems.
• Version-controlled source code with secure repository management.

Compliance

• Aligned with ISO 27001 information security management principles.
• Compliant with the Australian Privacy Act 1988 and Australian Privacy Principles (APPs).
• GDPR-aware practices for clients with international operations.
• Regular security audits and compliance assessments.

Reporting a Vulnerability

If you discover a security vulnerability in our systems, please report it responsibly to support@richlandltd.com. We take all reports seriously and will respond within 48 hours. We appreciate responsible disclosure and will work with you to address any verified vulnerabilities.

Contact

For security-related enquiries, please contact:

Richland Technology
Level 5 & 6, The Brewery, 5 Central Park Avenue, Sydney 2000
ABN 32 703 043 832
support@richlandltd.com