Security

How we protect data

• All traffic is encrypted with HTTPS (HSTS enforced).
• Form submissions are validated and processed on the server; no secrets are exposed to the browser.
• Our database enforces row-level security: the public can submit enquiries but cannot read them.
• Admin access is restricted to named BYND staff accounts.
• Payments are handled by a PCI-DSS compliant processor; we never see full card details.

Report a vulnerability

If you believe you've found a security issue, email hello@bynd.co.ke with the subject "Security report". Please include steps to reproduce and give us reasonable time to fix the issue before disclosing it.

Please don't access or modify other people's data, degrade the service, or use social engineering. We won't pursue good-faith researchers who follow these guidelines.