Security
Security at Toccata
Last updated: April 2026
Security is foundational to everything we build. Our users trust us with their data, from critical infrastructure telemetry to operational records. We take that responsibility seriously.
This page outlines our security practices and provides information for security researchers who want to report vulnerabilities.
Practices
How we protect your data
Encryption
Data is encrypted in transit and at rest using industry-standard protocols.
Infrastructure
Enterprise-grade cloud infrastructure with geographic redundancy.
Access Control
Least-privilege access with audited controls across production systems.
Monitoring
Continuous monitoring, logging, and regular security reviews.
Authentication
Strong password policies and multi-factor authentication support.
Development
Security-focused development practices including code review and regular testing.
Vulnerability Disclosure
Report a security issue
We appreciate the work of security researchers who help keep our users safe. If you've discovered a security vulnerability in any Toccata product or service, we want to hear from you.
How to report
Email your findings to [email protected]. Please include as much detail as possible: steps to reproduce, affected systems, and potential impact.
What to expect
- We'll acknowledge your report within 48 hours
- We'll provide an initial assessment within 7 days
- We'll keep you informed as we work on a fix
- We'll credit you in our security acknowledgments (if desired)
Guidelines
- Do not access or modify data belonging to other users
- Do not perform actions that could harm service availability
- Do not publicly disclose vulnerabilities before we've addressed them
- Act in good faith to avoid privacy violations and data destruction
Compliance
Standards and certifications
Our practices align with recognized industry frameworks. We undergo regular security assessments and maintain documentation of our security controls.
Security questions?
If you have questions about our security practices or want to request additional information, contact us at [email protected].