Access control
Administrative access is restricted according to role, operational responsibility and business need.
Security, Privacy and Resilience
Hozit Trust Centre
An overview of the practices, controls and operational principles used to protect customer services, systems and information.
Security contact available
Security concerns may be reported to security@hozit.co.za .
Our Approach
Trust is built into service delivery
Hozit applies a risk-based approach to security, privacy, availability and operational resilience.
Security
Layered technical and organisational safeguards designed to protect systems, accounts and customer information.
Learn more →Privacy
Responsible handling of personal information aligned with applicable South African data-protection requirements.
Learn more →Backup and Recovery
Backup, retention and restoration controls are applied according to the purchased service and customer requirements.
Learn more →Availability
Infrastructure monitoring, escalation and maintenance processes support reliable service delivery.
Learn more →Incident Response
Structured identification, containment, investigation, recovery and communication procedures.
Learn more →Responsible Disclosure
A clear channel for security researchers and customers to report suspected vulnerabilities responsibly.
Learn more →
Security
Layered protection
Security measures are selected according to the service, infrastructure, customer risk profile and applicable contractual requirements.
View the full Security Policy →Secure configuration
Systems are configured using security-conscious defaults, appropriate firewall controls and hardened service settings.
Patch management
Software and infrastructure updates are prioritised according to risk, severity and compatibility requirements.
Monitoring
Relevant infrastructure may be monitored for availability, abnormal activity, service failures and security events.
Encryption
Encryption is used for supported services and transmission channels where technically appropriate.
Account protection
Strong passwords, multi-factor authentication and controlled credential management are encouraged or enforced where available.
Privacy
Responsible information handling
Hozit aims to process personal information lawfully, transparently and only for legitimate business and service purposes.
Read the Privacy Policy →
Purpose limitation
Information should be collected and used for defined, legitimate and relevant purposes.
Data minimisation
Only information reasonably required for the relevant activity should be processed.
Retention controls
Information should not be kept longer than required for legal, contractual or operational purposes.
Data-subject requests
Requests relating to access, correction, objection or deletion are handled according to applicable requirements.
Business Continuity
Preparation for service disruption
Continuity measures are designed to reduce disruption and support structured service recovery.
Identify
Identify critical systems, dependencies, risks and recovery priorities.
Protect
Apply backups, access controls, monitoring and operational safeguards.
Respond
Escalate incidents, contain impact and coordinate technical response activities.
Recover
Restore services according to technical feasibility, contractual scope and business priority.
Important:
Backup frequency, retention, replication and restoration commitments depend on the purchased hosting or managed backup service. Customers should maintain independent backups of business-critical information.
Availability
Service monitoring and maintenance
Availability targets and support commitments are defined by the applicable service package, quotation or managed-service agreement.
Review the Service Level Agreement →
Incident Response
Structured security-event management
Detection
Receive alerts, customer reports or observations and assess the potential severity.
Containment
Limit further exposure while preserving relevant operational and investigative information.
Investigation
Determine the affected systems, cause, impact and required corrective action.
Recovery
Restore services safely, monitor stability and reduce the likelihood of recurrence.
Communication
Provide notifications where required by law, contract or the circumstances of the incident.
Policies and Documentation
Review our trust and legal documents
Access the policies that govern security, privacy, acceptable use, service delivery and customer relationships.
Security Contact
security@hozit.co.za
Report a concern
Report suspected vulnerabilities, compromised systems or security concerns through our designated security channel.