Security Policy

This policy describes the technical and organizational measures CAP SUD implements to protect personal information and systems used in its digital activities, including this website and the member area.

CAP SUD applies the following principles to protect the data entrusted to it:

• Encryption of communications between your browser and our servers (HTTPS/TLS)
• Passwords stored in encrypted form, never in plain text
• Data minimization — only information necessary for the requested service is collected

The site and associated data are hosted with reputable providers, with regular backups and availability monitoring. Payments are processed by a certified third-party provider (Stripe) — CAP SUD never stores members' credit card numbers.

Access to administrative data is limited according to the principle of least privilege:

• Only authorized CAP SUD staff have access to the back office
• Each administrator account is individual and password-protected
• Access rights are reviewed periodically and revoked as soon as they are no longer needed

In the event of a security incident that may affect your data, CAP SUD commits to assessing the impact, correcting the issue as quickly as possible, and informing affected individuals in accordance with applicable legal obligations.

We ask each member to choose a unique, strong password for their account, not to share it, and to report any suspicious activity on their member area to us without delay.

For any question about this policy or to report a security incident, contact us at info@capsudconsortium.com.