Cybersecurity Statement

Last updated: September 2026

1. Our approach

S4H takes reasonable, proportionate steps to protect this website and the limited information it handles. As a small consultancy running a static website on standard shared hosting, our security measures are appropriate to that scale — we do not claim enterprise-grade infrastructure we do not operate.

2. Hosting and transport

This website is hosted on a standard shared-hosting environment with Afrihost. The website is served over HTTPS, encrypting information in transit between your browser and our host.

3. Form security

The Contact and Work With Us forms include server-side validation, a hidden "honeypot" field and basic rate-limiting designed to reduce automated spam and abuse. Submitted information is emailed directly to our mailbox; it is not written to a public-facing database.

4. Email

S4H's email is hosted on Microsoft 365. We rely on Microsoft's own security infrastructure and practices for our mailboxes, which are governed by Microsoft's published documentation, not by S4H directly.

5. What we do not claim

We do not currently operate, and this website does not rely on, a web application firewall, intrusion detection system, formal penetration-testing programme, ISO 27001 or NIST-aligned certification, or a tested business-continuity/disaster-recovery plan. OWNER TO CONFIRM BEFORE PUBLICATION if any of these are, in fact, in place and should be added here — nothing is claimed on this page that has not been operationally confirmed.

6. Reporting a concern

If you believe you have found a security vulnerability affecting this website, please contact us at enquiries@solve4health.co.za with details. We will acknowledge reports made in good faith.

7. Related pages

See also our Privacy Policy and Terms of Use.