Incident response

Root & Branch Cloud maintains a formal incident response programme to detect, contain, and recover from security incidents.

Detection

• Automated monitoring and alerting for infrastructure and platform anomalies.
• Centralized logging of security-relevant events.
• Regular review of alerts by the security operations team.

Response process

1. Detect - identify a potential incident through monitoring or a report.
2. Assess - determine scope, severity, and impact.
3. Contain - limit exposure and prevent further impact.
4. Eradicate - remove the root cause.
5. Recover - restore affected systems and verify integrity.
6. Review - document lessons learned and update controls.

Customer notification

If a security incident affects customer data or service availability, we will notify affected customers without undue delay. Notifications include:

• A description of the incident.
• The data or services affected.
• Steps taken to contain and remediate.
• Recommended customer actions, if any.

Reporting a security issue

If you discover a vulnerability, please report it to security@rootandbranch.io. We appreciate responsible disclosure and will work with you to address the issue promptly.