Skip to main content
Ethereal Softech - We Design and Develop your Dream

Security & Trust

What we do to protect your data, your IP, and the software we ship. Everything on this page is verifiable.

1. Certified Quality Process

Ethereal Softech Pvt. Ltd. is certified to ISO 9001:2015 by KVQA Certification Services Pvt. Ltd. (certificate no. CB-QMS-045, issued 24 March 2025, valid until 23 March 2028) for the scope “Providing Mobile & Web App Development Services”. The certificate can be verified directly with the certification body.

2. Your IP and Your Data

  • NDA first. We sign a non-disclosure agreement before any sensitive detail of your product is discussed.
  • 100% ownership. Every engagement runs under a written services agreement that assigns all code, designs, and deliverables to you, with full repository access from day one.
  • Least access. Access to your systems is role-based and limited to the people working on your project, and is removed at handover.
  • Senior review. Every line we deliver is senior-reviewed, including AI-accelerated work.

3. This Website’s Own Security Posture

We hold our own site to the standard we sell. You can verify each of these from your browser or with any public scanner:

  • HTTPS everywhere with HSTS (includeSubDomains, preload).
  • A Content-Security-Policy plus a full set of hardening headers (X-Frame-Options, X-Content-Type-Options, Referrer-Policy, a deny-by-default Permissions-Policy, Cross-Origin-Opener-Policy).
  • Contact and application forms protected by server-side validation, timing checks, and per-IP and account-wide rate limiting. CVs are processed in memory for delivery and never stored on disk.
  • Lead data is stored outside the web root (or in a server-hardened private directory) and is never exposed over HTTP.
  • A published vulnerability disclosure channel per RFC 9116: /.well-known/security.txt.

4. Analytics and Subprocessors

The website uses Google Tag Manager, Google Analytics 4, and Microsoft Clarity for anonymous usage analytics. All analytics are off by default and load only after you accept the cookie banner (Google Consent Mode v2). Details are in the Privacy Policy.

5. Reporting a Vulnerability

Found a security issue in this website or in software we built? Email info@etherealsoftech.com. We acknowledge reports and keep you updated while we investigate. Please do not run automated scanners, denial-of-service tests, or social-engineering attempts against our staff or clients.

Questions from a procurement or security team? Contact us and we will answer in writing within 48 hours.