All data is encrypted in transit and at rest using industry-standard protocols.
We do not use customer data to train models and enforce strict vendor usage policies to ensure no client data is retained by AI vendors.
Strong authentication with Multi Factor Authentication and role-based access controls to ensure least-privilege access.
Documented security policies and incident response plan reviewed annually.
Annual training and hardened, managed devices with automatic updates and antivirus.
Recurring code security scanning and vulnerability assessments with industry-leading tools.