Security

How the box is run

Last updated 20 August 2026. None of this is a badge we bought. It is how VYRM Information Technology Solutions actually looks after the server.

Backups that are checked

Each night the database is dumped, the dump is verified, then the copy leaves this machine. A night that fails says so, in writing, where someone reads it. A backup nobody checks is a backup you find out about on the worst possible day.

If you ever want to leave, a full copy of your database is yours on request, in a standard format.

A practice copy before anything live

Every live system has a separate practice copy. Changes are tried there first, on practice data. Nothing gets tested on your live enrolment, or on a Saturday till, in the middle of a payment week.

The host is watched, and it is scanned

If a system stops answering, an alarm goes off here before your cashier phones you about it. Brute-force blocking and intrusion scanning run all the time. Sign-ins are recorded, so “who opened this record” is a question with an answer. Access is by role: people see what the job requires, not the whole file.

This website

vyrm.xyz sets no cookies and loads no scripts from other companies. There is no analytics product, no advertising pixel, and no location prompt. The browser is told not to run scripts, not to frame this site, and not to guess file types. Ordinary access logs are kept so the site can be defended, then dropped.

If you find a problem

Email hello@vyrm.xyz with enough to reproduce it. A machine-readable contact file lives at /.well-known/security.txt.

Please do not use a finding to take data that is not yours, and do not run a noisy attack against a live school or a live till. We do not run a paid bug-bounty programme. We do read the mail.

If the problem is in a client system, we tell the client. They are the controller. Where the law requires the National Privacy Commission to be told, that is their notice to make, with our help.

Privacy

Who owns the data, and what the Data Privacy Act lets a person ask for, is on the privacy notice. What a client is buying is on the terms.