We ask for only the access a task requires, through named accounts rather than shared passwords. Sensitive data is exchanged only through channels agreed in advance, never through public forms or ordinary email.
Changes to your infrastructure, security settings, or production systems are authorized in writing before they are made. Work is logged, and AI tools we use or build keep a person in the loop for consequential actions.
When an engagement ends, our access is removed and any copies of your data we hold are returned or deleted as agreed. See our security page for more.