Xscale Lancamentos LTDA

Network Security and Threat Monitoring Policy

Effective date: November 6, 2026 · Owner: Carlos Henrique Ferreira Guimaraes · Reviewed every 12 months or after any material change

Segregation

The internal tool runs only on the operator workstation. It exposes no inbound network service; local automation interfaces are bound to the loopback address (127.0.0.1) only and are unreachable from the network.
The public website is a static site served by Cloudflare's edge network and is fully separated from the internal tool: it holds no credentials, no database and no personal data.
The workstation does not use public or shared Wi-Fi for operations.

Host firewall (Windows Defender Firewall) enabled on the Domain, Private and Public profiles, default-deny for inbound traffic.
Microsoft Defender Antivirus with real-time protection and network protection monitors for malicious connections.
The public site is protected by Cloudflare (DDoS mitigation, TLS enforcement, bot filtering).
API traffic goes only to official TikTok endpoints over HTTPS.

Firewall and protection status are checked at least monthly and after every system update.

Approved by Carlos Henrique Ferreira Guimaraes, Managing Partner, on November 6, 2026.