Security is part of the system.
We aim to handle business information responsibly and design solutions with appropriate access, safeguards and transparency.
Access control
Use named accounts, least-privilege access and multi-factor authentication where supported. Review permissions when people or project scopes change.
Data handling
Agree what data is needed, where it is stored, who can access it, how long it is retained and how it will be returned or deleted at the end of an engagement.
Secure delivery
Use test environments where practical, avoid sharing credentials in plain text, document changes and validate workflows before production release.
Third-party services
Security controls and certifications vary by provider, product and plan. Check current vendor documentation and contracts for the services used in each solution.
Incident reporting
Define a monitored security contact, internal escalation path and response process before handling sensitive client data. Add your verified security contact details here.
Certifications and claims
Do not claim ISO, SOC 2, GDPR certification or other certifications unless the relevant legal entity and service genuinely hold the specific status. Compliance responsibilities depend on your role and circumstances.
Important: This page is a starter template, not legal advice. Review and customise it for your actual business, jurisdictions, tools, contracts and data practices before publishing.
Last reviewed: October 2026 · Update this date when you revise the page.
Questions? Contact us ↗