Security Standards

1. Our Security Commitment

At SAR Infotech, security is embedded into every layer of our operations — from website infrastructure and training lab environments to data handling and corporate communications. As an Oracle Workforce Training Partner, we uphold the highest standards of data integrity and information security to protect our clients, participants, and partners.

2. Website & Infrastructure Security

3. Data Protection Measures

• Encryption at Rest: All stored personal data and training records are encrypted using AES-256 encryption standards.
• Encryption in Transit: Data transfers between systems use TLS 1.2+ encrypted channels.
• Access Control: Role-based access control (RBAC) ensures only authorized personnel can access sensitive data.
• Data Minimization: We collect only the information necessary to deliver our training services effectively.
• Regular Backups: Automated daily backups with encrypted off-site storage ensure data recovery in case of system failures.

4. Training Environment Security

Our Oracle training lab environments are designed with security-first principles:

• Isolated Sandboxes: Each training session operates in an isolated virtual environment, preventing cross-session data leakage.
• Credential Management: Unique access credentials are generated per participant and deactivated upon course completion.
• No Production Data: Training environments use synthetic, anonymized datasets — never real production data.
• Session Monitoring: Lab environments are monitored for unauthorized access attempts or misuse.
• Automatic Cleanup: All participant data and lab instances are purged within 7 days of course completion.

5. Form & Communication Security

• All contact forms and enrollment submissions are processed over encrypted HTTPS connections.
• CSRF (Cross-Site Request Forgery) tokens protect form submissions from unauthorized requests.
• Input validation and sanitization prevent SQL injection and XSS attacks.
• Email communications containing sensitive information are transmitted through secure channels.

6. Compliance & Standards

SAR Infotech aligns its security practices with recognized industry standards and regulations:

7. Incident Response

In the event of a security incident, SAR Infotech follows a structured response protocol:

1. Detection & Containment: Immediate identification and isolation of affected systems.
2. Assessment: Evaluation of the scope and impact of the incident.
3. Notification: Affected parties are informed within 72 hours of confirmed data breaches.
4. Remediation: Root cause analysis and implementation of corrective measures.
5. Review: Post-incident review to strengthen security controls and prevent recurrence.

8. Report a Security Concern

If you discover a security vulnerability or have concerns about our security practices, we encourage responsible disclosure. Please contact us immediately:

Last updated: July 2026