Security First
Security & Compliance
At Think Pixel, security is treated as an important part of the product development and infrastructure lifecycle.
Our security-first approach focuses on protecting data, applications, infrastructure, and users through appropriate technical and organizational controls.
Last updated:
Security Framework
Think Pixel's security approach is informed by established industry frameworks and security guidance, including:
- ISO 27001
- NIST Cybersecurity Framework
- OWASP guidelines for web application security
These frameworks and guidelines help inform areas such as security controls, risk management, application security, access management, and operational practices.
Data Encryption
The original Think Pixel security policy specifies:
- TLS 1.3 for data encrypted in transit
- AES-256 encryption for data at rest
- Encrypted database backups
- Secure, access-controlled backup environments
Encryption practices may vary depending on the underlying infrastructure, service provider, application architecture, and type of data being processed.
Access Control
We follow the principle of least privilege, limiting access to systems and information according to legitimate operational requirements.
Security controls may include:
- Least-privilege access
- Multi-factor authentication for administrative accounts
- Role-based access controls
- Access reviews
- Credential management
- Administrative security controls
Regular access reviews help ensure that permissions remain appropriate for operational responsibilities.
Compliance & Regulatory Requirements
The original Think Pixel security documentation states compliance with:
- GDPR
- CCPA
- Applicable Indian data protection regulations
It also states that Think Pixel undergoes regular security audits and penetration testing.
Applicable compliance requirements can vary depending on the services provided, the type of information processed, the client's location, and the relevant legal framework.
Security Monitoring
Think Pixel monitors systems for potential security threats and operational anomalies.
The original security framework includes:
- Automated security scanning
- Intrusion detection systems
- Real-time security alerting
- Continuous security monitoring
- Threat detection
Monitoring helps identify and respond to potential security events as quickly as reasonably possible.
Incident Response
Think Pixel maintains a documented approach to handling security incidents.
Our incident response process includes defined procedures covering:
- Incident identification
- Severity classification
- Escalation
- Communication
- Investigation
- Containment
- Remediation
- Recovery
Security incidents are handled according to their severity and potential impact.
Security Contact
To report a security vulnerability, suspected security incident, or other security concern, contact our security team:
When reporting a vulnerability, please provide enough technical information for our team to understand and investigate the issue.
Security Updates
Security threats and technology continuously evolve.
Think Pixel regularly reviews its security practices to address emerging risks and improve its defensive capabilities.
This security documentation is reviewed quarterly and updated when necessary to reflect significant changes in our security practices, infrastructure, or applicable requirements.