At StellarStack Ltd, we take the security of our clients’ data, infrastructure, and intellectual property with the highest level of seriousness. Our security practices are designed to safeguard information against unauthorized access, disclosure, alteration, or destruction, while maintaining confidentiality, integrity, and availability across all services.
This Security Policy outlines StellarStack’s approach to information security management and applies to all employees, contractors, vendors, partners, and systems that access or handle StellarStack’s data, services, and infrastructure.
Our security framework is aligned with globally recognized standards and best practices, including:
StellarStack has established a dedicated Information Security Management Program (ISMP) responsible for defining, implementing, and maintaining the company’s security policies, standards, and procedures.
The ISMP ensures:
We employ multiple layers of protection to safeguard customer data, including:
StellarStack’s infrastructure is secured through a defense-in-depth approach, including:
Security is integrated into the entire software development lifecycle (SDLC). Our engineering teams follow:
Access to systems and data is strictly controlled:
In the event of a security incident, StellarStack follows a structured Incident Response Plan (IRP) consisting of:
All incidents are logged, monitored, and escalated to appropriate teams within defined SLAs.
We ensure that all third-party vendors, partners, and service providers handling our data comply with equivalent or higher security standards. Vendor risk assessments are conducted prior to onboarding and reviewed annually.
Access to data centers and office facilities is restricted through:
StellarStack conducts regular internal and external audits to ensure compliance with this policy and applicable regulations. We maintain transparency with clients regarding compliance certifications, audit results, and security controls upon request.
All employees undergo security awareness training during onboarding and annually thereafter. Specialized training is provided to personnel managing sensitive systems or data.
This Security Policy is reviewed annually or upon significant changes to technology, regulations, or business operations. Updates will be published on our website and communicated to relevant stakeholders.
For any questions, concerns, or security-related inquiries, please contact:
StellarStack Ltd
Kingsway #2600-4720, Burnaby, BC V5H 4N2, Canada
