How Farne protects data and systems across the products we build and the businesses we partner with.
Farne designs products with security and privacy in mind and applies technical and organizational controls appropriate to each project’s scope, infrastructure and risk profile. Security is considered throughout design and development rather than treated as an afterthought.
We aim to follow modern secure development practices, including encrypted transport (TLS) for data in transit and sensible application and infrastructure defaults. Secrets and credentials are kept in environment configuration or managed secret stores rather than in source code.
We collect only the data needed to deliver our services and keep it only as long as necessary. Where we control the infrastructure, we restrict access to information on a need-to-know basis and apply controls suited to the sensitivity of the data.
We favor least-privilege access and strong authentication for the systems we operate, and limit administrative access to the people who need it. Specific controls depend on the infrastructure and providers used for each project.
We build on established cloud infrastructure and apply monitoring, logging and backups appropriate to each system, so services can stay available and data recoverable to a degree suited to the project.
We welcome reports from the security community. If you believe you have found a vulnerability in one of our products or systems, please contact us so we can investigate and respond. We ask that you give us reasonable time to remediate before any public disclosure.
info@farne.appThis page describes our general security practices and is provided for information only. It does not form part of any contract. For specific requirements, please get in touch.
Whether you have a product idea, a business challenge or a project ready to scale, we'd like to hear about it.
FARNE LLC · 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States