Security
Last Updated: June 2026
Overview
Quick Brown Fox is committed to protecting client information and maintaining appropriate security controls across our systems, infrastructure, and software development processes.
Security considerations are incorporated throughout project delivery, operational processes, and technology decisions.
Infrastructure Security
Quick Brown Fox primarily utilizes Amazon Web Services (AWS) and Cloudflare for infrastructure, networking, and content delivery services.
Security controls may include:
- Multi-factor authentication (MFA) for administrative accounts
- Role-based and least-privilege access controls
- Encryption in transit using TLS
- Encryption at rest where supported and applicable
- Secure credential management
- Logging and monitoring of production environments
- Regular operating system and software updates
Application Security
Software development activities incorporate security practices including:
- Secure coding principles
- Authentication and authorization controls
- Input validation
- Dependency management and patching
- Testing in non-production environments prior to release
- Source control and change management processes
Security requirements are considered during planning, implementation, testing, and deployment activities.
Access Control
Access to systems and client information is restricted to authorized personnel with a legitimate business need.
Administrative access is reviewed and limited according to the principle of least privilege.
Data Protection
Quick Brown Fox implements reasonable technical and organizational measures designed to protect client information against unauthorized access, disclosure, alteration, or destruction.
Where applicable, client data is protected using:
- Encryption in transit
- Access controls
- Authentication safeguards
- Backup and recovery procedures
- Secure cloud infrastructure
Vulnerability Management
Security updates and critical patches are applied on a regular basis.
Identified security issues are reviewed, prioritized, and remediated based on severity and business impact.
Incident Response
Security incidents are investigated and addressed according to established internal procedures.
If a confirmed security incident affects client information, affected clients will be notified in accordance with contractual obligations and applicable legal requirements.
Third-Party Service Providers
Quick Brown Fox relies on carefully selected third-party service providers to deliver infrastructure, communications, and operational services.
Current subprocessors are listed at:
https://quickbrownfox.io/subprocessors
Privacy
Information regarding the collection and use of personal information is available at:
https://quickbrownfox.io/privacy
Security Contact
For security-related questions, vulnerability disclosures, or security concerns, please contact: