SECURITY

Security Policy

This page summarizes the security measures visible in the Peaple Technologies website implementation and explains how to report a concern.

Last Updated: 03 October 2026

1. Scope

This statement describes security practices apparent in the current website code. It is not a certification or guarantee that every system or third-party service is free from risk.

2. Secure Connections

The public website is published at https://peaple.in. Use the HTTPS address when visiting or submitting the contact form. Hosting and connection configuration are provided through Vercel; provider-level details may change.

3. Contact Form Protections

The server-side contact endpoint validates required fields and email format, limits input lengths, escapes submitted text before placing it in HTML email, and fixes the company recipient rather than accepting an arbitrary recipient. It applies an IP-based limit of five requests in a one-hour sliding window through Upstash. If the rate limiter is unavailable, the endpoint does not send the email.

4. Credentials and Access

Resend and Upstash credentials are read by the serverless function from server-side environment variables and are not placed in the page's JavaScript. The contact form is a public endpoint and does not use visitor accounts or authentication. The project does not contain a separate customer database.

5. Providers

The site uses Vercel for hosting, Resend for contact email delivery, and Upstash for rate-limit storage. Careers applications go to an external Google Form. Each provider is responsible for the security of its own service; review its published security and privacy information for details.

6. Software and Reviews

Application dependencies are recorded in the project's package files. The project does not document an automated security monitoring service, scheduled security review, formal access-control program, or certification. Dependency updates and security review should be considered as the site is maintained.

7. Reporting a Security Issue

If you believe you have found a security issue affecting this website, email peaplesupport@gmail.com with a description and steps to reproduce it. Do not include real personal data, credentials, or exploit payloads in a report. We will review reports and take appropriate action.

8. Changes to This Policy

We may update this policy when the implementation or relevant practices change. The latest version and update date will appear on this page.