Security practices
Security controls are configured as part of each engagement. What is implemented in any particular engagement depends on the agreed system architecture and scope.
- Access control. Role-based access controls are implemented according to the agreed system architecture and engagement scope.
- Audit logging. Audit logging is implemented according to the agreed system architecture and engagement scope.
- Monitoring. Monitoring is applied according to the agreed system architecture and engagement scope.
- Data boundaries. Data-boundary controls are designed and configured according to the agreed deployment architecture. Where a deployment involves third-party services, the applicable data flow is agreed with the client as part of that architecture.
- Encryption. Data transmitted to and from this website is encrypted in transit (HTTPS/TLS). Encryption at rest and within deployed systems is applied where appropriate to the agreed architecture.
- Incidents. Security incidents affecting systems we operate are handled in accordance with the signed agreement and applicable law, including any applicable notification obligations.
No system is entirely secure. We do not claim that any system we provide is free from vulnerabilities, immune from compromise, or compliant with any security standard or certification, unless we state that expressly and can evidence it.
Reporting a security concern
If you believe you have found a security issue in this website or in a system we operate, please contact consult@verdanforge.com.my with enough detail for us to reproduce or assess it. We will review reports in good faith.
Please do not test, probe, scan or disrupt any system you are not authorised to access. Nothing here authorises any activity that would otherwise be unlawful.
Responsible use
- Do not use our website or systems for any unlawful, harmful or deceptive purpose.
- Do not attempt to gain unauthorised access to any system, account, network or data.
- Do not interfere with the operation of any system, or with the safety or integrity of any industrial process.
- Do not introduce malware, or use our systems to distribute it.
- Comply with your own organisation’s policies, site rules and statutory obligations when using anything we provide.
AI and automated systems notice
Our services use AI and automated systems. That brings real benefits and real limits, and we would rather state the limits plainly:
- AI-assisted output can be wrong. Automated and AI-assisted output can contain errors, omissions, or results that appear plausible but are incorrect.
- Human review is required. AI-assisted output should be reviewed by an appropriately qualified person before it is relied on for any decision.
- Demonstrations are illustrative. Animations, demonstrations and interface examples on this website are illustrative unless expressly identified as live. Figures displayed in them are representative examples, not measurements of any client environment.
- Imagery is illustrative. Some imagery on this website is created or edited using artificial intelligence tools and then selected, composed and finished by us. It is illustrative, it is not a photograph of our engagements, and it does not depict real individuals, clients, client sites or equipment unless we expressly state otherwise. We do not claim exclusive rights in AI-generated elements themselves. If any image is claimed to infringe a third party’s rights, we will remove or replace it promptly.
- Not automatically professional advice. Automated recommendations are not, by themselves, professional engineering, financial, legal, safety, or other regulated professional advice.
- High-consequence decisions need human control. Safety-critical or otherwise high-consequence decisions require appropriate human and professional controls, and must not rest on automated output alone.
- Scope comes from the agreement. The deployment scope, performance expectations, and acceptance criteria of any system are determined by the applicable engagement agreement — not by website content or a demonstration.
- No outcome guarantee. Using AI or automation does not by itself guarantee any business, financial or operational outcome. See our Disclaimer.
Safety and industrial use
Verdan Forge works in industrial and manufacturing environments. General information on this website, and any AI or automated demonstration, is not a substitute for:
- a site-specific risk assessment;
- engineering approval or sign-off;
- statutory or regulatory requirements, and any required approvals;
- your site’s safety procedures and permit-to-work systems;
- manufacturer instructions and equipment limits;
- review by a suitably qualified professional; and
- human supervision of the operation concerned.
Nothing in this notice reduces, removes or transfers any responsibility that Verdan Forge Solution has expressly undertaken under a signed agreement.
Third-party services
Our website and our services rely on third-party services, which may include hosting and cloud infrastructure, application programming interfaces (APIs), AI model providers, communication services, and external or social-media platforms. We do not control third-party infrastructure, and we do not warrant its availability, performance or continued provision. A link, mention or integration is not an endorsement of that service by us, and does not mean that the provider endorses us. See the Privacy Policy for the services that process visitor data.
Information supplied to us
Where a client or another authorised party provides information for a project, that party remains responsible for the accuracy, completeness and legality of that information, and for holding the necessary permissions and third-party rights to provide it — except where the signed agreement provides otherwise.
What any system can produce depends on the quality, completeness and availability of the source data supplied to it, and on the systems it draws from. Unreliable, incomplete or unavailable source data will limit the output.
Related notices
See also our Website Terms of Use, our Privacy Policy, our Disclaimer, and our Intellectual Property & Content Rights notice.
Last updated: 2026-09-22