Overview
This page is maintained by STARTUPWORX OÜ to answer common security and privacy questions about Hi Networking. It describes the controls we have enabled today; it is not an independent certification or audit. Please read it together with our Privacy Policy, Cookie Policy and Terms of Use.
1. Standards we align to
We design our security and privacy program around widely-adopted frameworks so our practices remain measurable and auditable. The badges below name those frameworks — they are a statement of alignment, not a claim of independent certification.
SOC 2 · GDPR · ISO/IEC 27001
Our controls are mapped to these frameworks. Where formal certification is in progress, we will publish the auditor and report scope on this page.
- SOC 2 Type II standard: SOC 2 Type IIFramework · aligned
Controls mapped to the AICPA Trust Services Criteria for security, availability, and confidentiality.
- EU General Data Protection Regulation: GDPREU · in effect
Processing built around GDPR data-subject rights, lawful bases, and Article 32 security obligations.
- ISO/IEC 27001 information security standard: ISO/IEC 27001Framework · aligned
Information security controls aligned to the ISO/IEC 27001 Annex A control set.
2. Access & authentication
- Email + password sign-in, with optional Google sign-in.
- Sessions are managed via secure, rotating tokens stored in your browser only.
- Administrative actions in the platform require a separate role and are recorded in an audit log.
3. Data protection
- Data is encrypted in transit (TLS) and at rest on our managed database and storage providers.
- Row-level security policies enforce that you can only read and write your own contacts, notes, voice notes and timeline events.
- Voice recordings live in a private storage bucket; only you can play back or delete them.
4. Hosting & infrastructure
The Platform runs on managed cloud infrastructure inside the European Economic Area, with edge delivery for static assets. AI features may transmit data to third-party model providers; those calls happen server-side and only with the minimum payload required to fulfil the request.
5. Backups & availability
Our managed database performs automated backups. We continuously monitor uptime; see the Status page for current availability.
6. Your controls
- Export, edit or delete your contacts and timeline entries at any time.
- Manage cookie categories from the Cookie Policy.
- Request account deletion or a copy of your data by emailing the address below.
7. Responsible disclosure
If you believe you have found a security issue, please report it privately to security@hinetworking.com. We commit to acknowledge reports within 5 business days and to keep researchers informed of remediation. Please do not publicly disclose the issue until we have had a reasonable opportunity to fix it.
8. Contact
STARTUPWORX OÜ
Registry code: 16606029
Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia
E-mail: security@hinetworking.com