1. Security principles

Insimen is designed around least-privilege access, protection by design, and limiting impact when an issue occurs. No digital system is risk-free, so controls are reviewed and improved as the product evolves.

2. Product controls

Controls are applied in proportion to the feature and its risk.

• authentication and role-based access controls for relevant areas
• server-side validation, sensitive-access restrictions, and audit logging for significant activity
• separation of secret configuration from public application code and secure session handling
• operational monitoring and phased security improvements

3. Your role

Keep your account and devices secure.

• Use a unique password and never share it.
• Enable available account verification methods.
• Do not send passwords, one-time codes, tokens, or other secrets through regular messages.
• keep your credentials and devices secure
• provide accurate information and ensure you have the right to upload documents
• not use the service for unlawful activity, fraud, or unauthorized access

4. Sensitive access and changes

Sensitive changes are checked server-side. Relevant activity may be recorded to support security, abuse prevention, and incident investigation.

5. Incident reporting

If you suspect unauthorized access, change your password, sign out of unrecognized sessions, and contact us. Do not include passwords, one-time codes, or unnecessary private content in a report.

6. Important limit

Insimen provides digital tools and service assistance; legal, tax, and business decisions should still be reviewed by the appropriately qualified party for your needs.