Security Policy

Last updated: June 1, 2026

1. Security Commitment

Xarniva Ltd applies practical security measures across the servers, communication systems, and client data we manage. Security is part of how we deliver our IT and business communication services.

2. Infrastructure Security

Our infrastructure security measures include:

• Network firewalls and access controls on managed systems
• Encryption for data in transit (TLS/SSL) where applicable
• Regular software updates and security patching on managed servers
• Monitoring and alerting for system availability and unusual activity
• Backups and recovery procedures for client systems we manage

3. Access Control

We limit access to client systems and data on a need-to-know basis. Access is protected with strong authentication where supported, role-based permissions, and review of access when team members or project scope changes.

4. Compliance

We follow data protection and security practices that apply to our IT and business communication services in the countries where we operate, including UK GDPR where relevant.

5. Incident Response

If we identify a security incident affecting client systems or data, we investigate promptly, take steps to contain and remediate the issue, and communicate with affected clients as appropriate.

6. Personnel

Team members who access client systems are expected to follow our security guidelines and handle client data responsibly. Access is granted only for legitimate business and support purposes.

7. Reporting Security Concerns

To report a security vulnerability or concern, contact us at hello@xarniva.com. We take all reports seriously and aim to respond within two business days.