Information Security Policy
Last updated: July 10, 2026
JSK Corporation takes reasonable, practical steps to protect the information entrusted to us — both on this website and in the client work we deliver. This page summarizes our approach at a high level; specific technical and contractual security commitments for a given engagement are defined in that project's agreement.
Website security
- This site is served entirely over HTTPS, encrypting data in transit.
- It is published as a static site, which minimizes server-side attack surface compared to a dynamic application.
- Access to the site's source code and hosting is restricted to authorized team members, protected by unique credentials.
Data handling
We collect the minimum information needed to respond to inquiries submitted through this site. See our Privacy Policy for details on what we collect and how it's used.
Access control and least privilege
- Access to systems and data is granted on a need-to-know, least-privilege basis.
- Credentials are unique per person; shared logins are avoided.
- Access is revoked promptly when a team member's role changes or ends.
Security in client engagements
- Access controls and least-privilege practices on project systems.
- Code review as part of our development process.
- Keeping dependencies and infrastructure up to date with security patches.
- Secure handling of credentials and client data — never stored or shared beyond what a project requires.
Team security awareness
Team members handling client or visitor data are made aware of our data handling practices and expected to follow them, including safe credential management and prompt reporting of anything that looks like a security issue.
Incident and breach response
If we become aware of a security incident affecting client or visitor data, we investigate promptly, contain the issue, and notify affected parties and any required regulator without undue delay and in line with applicable legal requirements (for example, within 72 hours of becoming aware, where the GDPR's notification timeline applies).
Reporting a concern
If you believe you've found a security issue affecting this website, please report it to support@jskcorporation.com.
Policy review
We review this policy periodically and update it as our practices evolve.