Security Statement & Responsible Disclosure

1. Our Commitment to Security

At CORENOVA TECHNOLOGY LTD, security is not an afterthought—it is embedded into every line of code we write, every AI model we train, and every cloud server we configure. We employ strict zero-trust access controls, end-to-end encryption, and continuous monitoring to safeguard client data and proprietary infrastructure.

2. Mutual Non-Disclosure & IP Protection

We execute legally binding mutual Non-Disclosure Agreements (NDAs) prior to starting any technical engagement. All custom client codebases, database schemas, and AI models remain the 100% exclusive intellectual property of the client.

3. Infrastructure Standards

• Encryption in Transit & Rest: All web communications utilize TLS 1.3 encryption, and data stores are encrypted at rest using AES-256.
• Edge DDoS Protection: Global Web Application Firewall (WAF) rules powered by Cloudflare mitigate automated bot traffic and DDoS attacks.
• Sentry Error Monitoring: Real-time automated error tracking isolates and alerts our SOC team to runtime anomalies instantly.
• NDPR & GDPR Compliance: Strict data privacy controls adhering to the Nigeria Data Protection Regulation (NDPR).

4. Responsible Vulnerability Disclosure

We welcome reports from cybersecurity researchers and ethical security professionals. If you believe you have discovered a vulnerability in any Corenova system or client application:

We commit to acknowledging all reports within 24 hours and providing regular updates on remediation progress. We request that researchers refrain from public disclosure until the issue has been resolved.