Security

This page describes the administrative, technical, and organizational measures VISIONTHREETECH LTD, trading as VisionThree ("we", "us"), takes to protect the data entrusted to our website and 3D commerce platform. It is an overview of our practices and does not replace the commitments in our Terms & Conditions or the data handling details in our Privacy Policy.

1. Infrastructure and hosting

The VisionThree platform is hosted with established cloud infrastructure providers that maintain industry-standard physical security, environmental controls, and independent compliance certifications (including ISO 27001 and SOC 2) for their data centers. Production systems are logically separated from development and testing environments.

2. Encryption

• In transit: all traffic between your browser and our platform is encrypted using TLS (HTTPS). We do not serve platform content over unencrypted connections.
• At rest: databases, uploaded 3D assets, and backups are encrypted at rest using the encryption provided by our hosting providers.

3. Access control

• Access to production systems is restricted to authorized personnel on a least-privilege, need-to-know basis.
• Administrative access requires multi-factor authentication.
• Access is reviewed regularly and revoked promptly when team members change roles or leave.
• Within the platform, customer data is isolated so that each customer can only access its own assets and configurations.

4. Application security

• Code changes go through peer review and automated checks before release.
• Dependencies are monitored for known vulnerabilities and updated on a regular cadence.
• The platform enforces row-level access controls on stored data, so database-level permissions match what each user is allowed to see.
• Secrets such as API keys are stored in a managed secrets store and never committed to source code.

5. Availability and backups

Customer data is backed up automatically by our hosting providers, and we use commercially reasonable efforts to maintain at least 99.9% uptime for the production platform, as described in our Terms & Conditions.

6. Subprocessors

We rely on a small number of service providers (cloud hosting, email delivery, analytics, and customer support tooling) to operate the platform, as described in our Privacy Policy. Each is bound by contractual obligations to protect personal data and to process it only as instructed by us.

7. Incident response

If we become aware of a security incident affecting your data, we will investigate promptly, take steps to contain and remediate it, and notify affected customers and regulators where required by applicable law.

8. Reporting a vulnerability

If you believe you have found a security vulnerability in the VisionThree website or platform, please report it to myles@visionthree.io with a description of the issue and steps to reproduce it. We ask that you do not publicly disclose the issue until we have had a reasonable opportunity to investigate and address it. We will acknowledge reports and keep you informed of our progress.

9. Contact us

Questions about our security practices can be sent to myles@visionthree.io. For more on how we handle personal data, see our Privacy Policy, and for the terms governing use of this website, see our Terms of Use.