Information Security

Our approach

BoDuo builds systems for real business environments: security is part of the architecture from day one, not an afterthought.

Measures in place

• Encryption in transit (HTTPS/TLS) across the entire site and forms;
• Restricted access following the principle of least privilege (RBAC on our internal systems);
• Full site backup created before every deployment;
• Regular updates of dependencies and infrastructure;
• Access logging and baseline monitoring.

Contact form data

Information submitted through the form is transmitted encrypted (TLS) to our systems and is only accessible to team members who need it to respond to you.

Incident management

If a confidentiality incident presents a risk of serious harm, we notify the Commission d'accès à l'information du Québec and the individuals concerned, in accordance with Law 25.

Report a vulnerability

Found a flaw? Write to us at info@boduo.ca. We appreciate responsible disclosure and commit to responding quickly.

A note of honesty

No system is 100% secure. We apply reasonable, risk-proportionate measures and review them as risks evolve.