Security Policy

Server Primes is a software service operated by Primes Pro Ltd, a company registered in England and Wales, United Kingdom under company number 15158504.

1. Encryption

All agent traffic uses TLS 1.3. Stored metrics, logs, and backups are encrypted at rest with AES-256.

2. Access Control

Internal access follows least privilege, requires multi-factor authentication, and is audit logged. Customer accounts support role-based access control and SSO/SAML on Enterprise plans.

3. Agent Design

The agent is open source and auditable. It runs unprivileged where possible, makes only outbound connections, and never opens inbound ports on your server.

4. Infrastructure

Redundant multi-region infrastructure with automated failover, encrypted backups, and continuous monitoring of our own platform.

5. Incident Response

We maintain a documented response process. Confirmed incidents affecting customer data are communicated without undue delay, and within 72 hours where the UK GDPR requires notification.

6. Responsible Disclosure

Report suspected vulnerabilities to support@serverprime.io. Please do not publicly disclose before we have had a reasonable opportunity to remediate. We do not pursue legal action against good-faith researchers.

Contact

Questions about this policy? Email support@serverprime.io or write to Primes Pro Ltd, 7 Coronation Road, Dephna House, Launchese #105, London, NW10 7PQ, United Kingdom.