Legal notice and compliance
Who publishes this site, what it does with your data, and how to report a vulnerability to us.
Publisher
- Company
- SIFNOS
- Legal form
- SASU — Simplified joint-stock company with a sole shareholder
- Share capital
- €1,000
- SIREN
- 824 033 930
- SIRET
- 824 033 930 00028
- Trade register
- Lorient B 824 033 930
- VAT number
- FR57824033930
- Activity code
- 6202A — Computer systems and software consultancy
- Registered office
- 3 Kervarch, 56410 Erdeven, France
- Publication director
- Sébastien Nicolaïdis
Hosting
This site is static: no database, no user accounts, no forms.
- Host
- Cloudflare, Inc.
- Address
- 101 Townsend St, San Francisco, CA 94107, United States
Personal data
We collect no personal data on this site. There is no analytics, no advertising tracker, and no cookie set by us. Your browser may store your light or dark theme preference locally; that information never leaves your device.
If you write to us at contact@sifnos.io, we process your message and contact details solely to reply, and keep them for the duration of the business relationship. We never sell or share them.
Under the GDPR you may request access, correction, erasure or portability of your data, and object to its processing. Write to us; you may also lodge a complaint with the CNIL, the French data protection authority.
Reporting a vulnerability
If you believe you have found a flaw in this site or in a tool we publish, write to us. We acknowledge receipt within 72 working hours.
- Security contact
- security@sifnos.io
- security.txt
- /.well-known/security.txt
We practise coordinated disclosure: we agree a remediation window with you, and credit you by name on publication unless you prefer to stay anonymous. Please do not access data that is not yours, do not degrade the service, and allow us to fix the issue before you publish.
Our security posture
What is in place today, and what remains to do. We would rather say so than claim otherwise.
In place- Workstations encrypted at rest, firewall on, system integrity protection enabled and immediate session lock.
- SSH keys protected by a passphrase.
- An automatic guard that refuses any commit containing a secret.
- A security contact address and a disclosure policy published (security.txt).
- Static site: no application server, no cookies, no trackers.
- Multi-factor authentication on every account, and separation of administrative and day-to-day accounts.
- An offensive testing environment isolated in dedicated virtual machines.
- Encrypted backups and a written recovery procedure.
Intellectual property
Unless stated otherwise, the content of this site belongs to SIFNOS. Third-party trademarks and logos belong to their respective owners. Tools we release as open source are governed by the licence stated in their repository.