English
Access control
CRM and Client Portal areas require authenticated access. CRM sessions use expiring tokens, role checks and admin-only controls for sensitive actions such as account creation, password resets, invoice management and AI teaching records.
Data protection
Passwords are stored as salted password hashes. Temporary passwords should be changed at first login. Career attachments are validated by file type and size before they are sent to the Talent team.
Transport and browser security
The site is configured with HTTPS-focused headers, content type protection, anti-framing controls, referrer policy, permissions policy and a content security policy.
NGRConnect
Remote sessions use generated session IDs and passwords. Host and co-host controls are restricted. Participants should join only links received from trusted NextGenIT staff.
Client responsibility
Clients should avoid sharing passwords, MFA codes, private keys or sensitive production secrets through public forms, chat assistants or remote support chat. Urgent security incidents should be opened through the Client Portal or by email.
Francais
Controle d'acces
Les espaces CRM et Portail Client exigent une authentification. Les sessions CRM utilisent des jetons avec expiration, des controles de role et des actions sensibles reservees aux admins.
Protection des donnees
Les mots de passe sont stockes sous forme de hash sale. Les mots de passe temporaires doivent etre changes a la premiere connexion. Les pieces jointes de candidature sont controlees par type et taille avant envoi a l'equipe Talent.
Securite transport et navigateur
Le site utilise des en-tetes de securite orientes HTTPS, protection du type de contenu, anti-iframe, politique de referent, permissions navigateur et politique de securite de contenu.
NGRConnect
Les sessions de support distant utilisent des ID et mots de passe generes. Les controles hote et co-hote sont restreints. Les participants doivent utiliser uniquement les liens transmis par un collaborateur NextGenIT de confiance.
Responsabilite client
Les clients ne doivent pas partager de mots de passe, codes MFA, cles privees ou secrets de production via les formulaires publics, assistants chat ou chat de support distant.
