Published Information Security Program

Yes. Leo Infinity maintains a published Information Security Program covering governance, access control, secure development, data protection, incident response, vulnerability management, endpoint baseline, vendor management, and periodic review. Evidence: https://app.leo.com.vc/seguranca/information-security-program

Policy controls

• Security ownership is assigned to the product operator and production access is limited to approved administrators.
• Protected marketplace data is used only to provide dashboard, inventory, cost, order, fiscal, and shipment workflows requested by the seller.
• Security requirements are reviewed before adding new marketplace integrations, API scopes, or data flows.
• Changes are deployed through the GitHub and Vercel workflow, with production configuration kept outside the codebase.

Evidence notes

• Public policy page available without login.
• Terms and Privacy Policy are linked during account registration.
• Production application uses HTTPS and authenticated sessions.