trust center
How we work inside your infrastructure
Remote operations means our engineers hold access to your systems. Below is exactly which controls govern that.
controls
Eight core controls
Remote access
Named accounts, no shared credentials. Access is granted per system and time-boxed.
MFA
Multi-factor authentication is mandatory for every engineer, without exception.
Privileged access
Administrative rights are granted on demand, with approval and automatic expiry.
Session logging
Who connected, when, and what changed — sessions are logged and retained for an agreed period.
Change approval
A production change requires approval, a window and a rollback plan.
Data retention
Log and backup retention is fixed in the contract; data is deleted when the period ends.
Incident handling
A separate procedure governs security incidents: containment, notification, analysis, report.
Backup protection
Backups are stored independently of the system they protect.
The full security documentation — access matrix, logging policy and incident response procedure — is provided at contract stage, under NDA.