Security
Data in the EU, run by us.
What a customer should be able to check. Internal server and deploy detail is not published.
Data in the EU, run by us.
01
Hosting
The site, product and mail run on European Union infrastructure we operate. No third-party SaaS CRM or analytics.
02
Transport
Web traffic is encrypted (HTTPS). Outbound mail is authenticated (SPF, DKIM and DMARC).
03
Headers
We apply standard security headers (CSP, clickjacking, referrer). The exact set changes over time and is not a public inventory.
04
Access
The internal panel requires a session. Public forms are rate-limited.
05
Backups
We take encrypted backups on a regular schedule. The exact procedure is not described on this site.
06
Privacy
No third-party tracking cookies. First-party analytics is opt-in. Detail in the privacy policy.
Responsible disclosure
If you find a vulnerability on plutontech.es, email us before publishing it. We reply on business days. No bounty: we will fix it, and credit you if you want.
Contact
Let's talk.
Tell us what you need and we'll propose a realistic plan.