Security & Compliance Architecture

Security Operations Center: security@apacsupport.com • Standard: SOC 2 Type II & ISO/IEC 27001 Aligned

1. Encryption in Transit & at Rest

All web and email transport endpoints across apacsupport.com enforce TLS 1.2 / TLS 1.3 with Perfect Forward Secrecy (ECDHE), HTTP Strict Transport Security (HSTS), and 2048-bit RSA DKIM + strict DMARC (p=reject) authentication.

2. Access Control & Zero-Trust Infrastructure

• Production infrastructure is segmented within isolated Virtual Private Clouds (VPC) with least-privilege firewall ingress rules.
• Administrative access requires hardware-backed multi-factor authentication (MFA) and short-lived Identity-Aware Proxy (IAP) tokens.

3. Responsible Disclosure Policy

We welcome coordinated vulnerability reports from security researchers. Please send detailed findings to security@apacsupport.com.