Security & Data Protection Information

1. Purpose

This page summarises customer-relevant security practices for SUD TAX CRM / MY CLIENT HUB. It is informational, not a certification.

2. Verified control themes

• Authentication for MY CLIENT HUB customer sessions and Platform Admin (separate consoles).
• Password reset via transactional email when SMTP is configured.
• Tenant isolation for customer CRM workspaces (customers cannot authorise access via client-supplied tenantId).
• CRM engine isolation between customer tenants.
• Database services for CRM engines kept on private container networks (not exposed as public customer endpoints).
• Operational backups for Control Plane / recovery procedures.
• Health monitoring of core production services.
• Role-separated Platform Admin vs customer CRM product surfaces.

3. What we do not claim

• SOC 2, ISO 27001, GDPR certification, or PCI DSS certification (unless separately obtained and stated).
• That any system is 100% secure.

4. What we do not publish

We do not publish server IPs, internal ports, encryption keys, credentials, detailed database topology, or private Docker/infrastructure diagrams on this page.

5. Reporting

Security concerns: info@myclienthub.in.