People & Security Culture

Hiring, training, and operating practices that support Taloflow security.

Scope

This page covers organizational and process controls.

For technical controls (auth, encryption, logging, recovery), start at Security Overview.

Employee vetting

• Background checks are performed for new hires, per local law.

• New hires sign confidentiality and non-disclosure agreements.

Security culture

• Teams follow an internal security best-practices guide.

• Employees and contractors complete security training and receive regular refreshers.

• We run recurring checks to verify security practices are followed.

Where to find technical controls

This page stays intentionally non-technical.

Use these pages as the source of truth for implementation details:

• Identity and access: Authentication & Access Control and Authorization & Permissions

• Encryption: Encryption Standards

• Logs and backups: Logs, Audit Logs, and Backups

• Malware controls: Malware Protection

• Incident response and recovery: Security Operations, Incident Response, and Disaster Recovery

• Environment and tenant separation: Tenant & Environment Isolation

• Billing and payments: Payment Security