Security Practices

XFind takes a privacy-conscious and security-conscious approach to visitor inquiries and communications. The goal is to collect only what is needed, limit access, and maintain professional safeguards around information shared through official channels.

• HTTPS encryption for website connections.
• Encrypted communication where appropriate.
• Data minimization for inquiries and support.
• Least privilege access principles.
• Limited employee access to information.
• Strong authentication practices.
• Password protection expectations.
• Device security practices.
• Session protection controls.
• Secure hosting practices.
• Security monitoring.
• Routine updates.
• Incident response planning.
• Privacy by design.
• Data retention principles.
• No sale of customer information.
• Responsible handling of inquiries.

Inquiry information is handled for the purpose of responding to visitors, providing educational guidance, and supporting requested communications. XFind does not sell customer information.

Although XFind implements reasonable safeguards, no internet service can guarantee absolute security. Visitors should always use strong passwords, secure devices, updated browsers, and official communication channels.