legal notice

Security Policy

Effective date : 2026-01-01 | XRPFLOW

XRPFLOW (hereinafter referred to as “Company”) operates the following security policy to protect users’ deposited assets and personal information.

1. Encryption and communication security

SSL/TLS encryption

All communications are encrypted via SSL/TLS protocols.

Password protection

Passwords are stored using a one-way hash algorithm.

data encryption

Sensitive personal information and important data are encrypted, stored and managed.

2. Operation of deposited assets

  • Cold wallet storage: Core custody operations use offline storage to minimize risk.
  • Minimize online exposure: Only the minimum required for deposit verification and settlement remains online.
  • Multiple approval process: Additional approvals for major asset transfers reduce single points of failure.

3. Access control and management

  • Access is granted only to the minimum number of people per task.
  • Administrator and important system access records are managed in logs.
  • We apply additional security procedures to administrator accounts.

4. Infrastructure and system security

  • We operate firewalls, security programs, and intrusion detection systems.
  • Perform regular inspections and vulnerability reviews.
  • Quickly apply security updates and patches.

5. User security information

01 Use a strong password.

02 Do not share your password with anyone.

03 Verify the deposit address and network carefully.

04 Do not enter personal information through suspicious links or messages.

This policy will take effect from January 1, 2026.

XRPFLOW