Trust and security
Chefu Technologies builds and operates software, AI, and digital products with security, privacy, and responsible access in mind. This page describes the public practices we take seriously without exposing sensitive implementation details.
We design authentication flows around least privilege, strong credential handling, and secure session boundaries. Where supported, modern mechanisms such as passkeys and short-lived access patterns are preferred over weak or static credentials.
Our web products use secure transport, defensive HTTP headers, origin validation, and controlled redirect patterns to reduce common attack paths such as abuse, impersonation, and open redirect patterns.
User, customer, and application information is stored and handled only where needed for the service, with retention limits, minimization, and clear access boundaries applied throughout the platform lifecycle.
We rely on environment separation, configuration validation, and deployment checks so production systems are not exposed to avoidable misconfiguration or accidental data leakage.
Security, privacy, and usability are considered together. We prefer transparent product flows, explicit consent points, and clear user-facing controls over hidden or confusing behavior.
Security concerns are treated seriously and triaged with urgency. We evaluate reports promptly, assess impact, and take corrective action where the risk is material to the user or platform.
If you identify a security or privacy issue involving a our product, platform, or service, contact the team at hello@chefu.co.za. Please include the relevant URL, the nature of the issue, and any supporting detail you have. Do not share passwords, access tokens, or confidential internal material in the first message.