Secure Path Consultancy · Policy
Security overview
A plain-language summary of the controls in the SPC Catalog Workbench. This is not a certification or a substitute for a customer security assessment.
Draft · Prepared 8 November 2026 · Complete marked details before publishing
Account and data access
The member workspace requires a signed-in account. Saved import history is queried by the signed-in account ID, and server-side actions check that account before reading or writing its records.
Original source workbooks are processed in the browser. Only saved run metadata and change-log entries are retained in the account database.
Transport and audit trail
App traffic is served over HTTPS, protecting data in transit. Workbench decisions can be recorded with the source row, field, previous value, new value, action, operator and timestamp. The log can be exported with the merged workbook.
The import log is an operational change history, not a claim of tamper-proof or independently audited logging.
Data location and limitations
Saved account records and import history are processed on Imagine's servers. The precise processing location must be confirmed with Imagine. Organisations with UAE-only residency rules should not save catalogue logs until the approved location is confirmed.
No independent penetration test, ISO certification or SOC report is claimed. Do not upload regulated or export-controlled information until your organisation approves the service and its data location.
Security contact
Report a security concern to info@securepath-ae.com. Secure Path Consultancy, trade licence no. 262266155888, is based at Amber Gem Tower, Ajman, UAE.