Security and operating responsibilities
Start with data boundaries, permissions, access management and incident reporting.
Data access
Define staff roles and permissions, including sensitive actions requiring additional verification or a second approval. Support messages must not contain passwords or access keys.
Protection scope
Security review covers the environment, storage, backups and connectors. The website does not disclose network topology, management addresses or business operating data.
Report a concern
Send a brief description to [email protected] without customer data or secrets. We will arrange an appropriate channel for the details required for review.
Agree the scope before contracting
Review the base subscription and discuss required expansions and integrations with the team.