Engagement security
Client data accessed during engagements is processed under signed NDAs, with role-based access, audit logging and least-privilege principles.
Legal
Security
Security posture for client engagements and the data handled through our website and operating systems.
Infrastructure
Production systems run on hardened cloud infrastructure with encryption in transit and at rest. Access uses SSO with MFA enforced.
Incident response
We operate a documented incident-response process with a 24-hour notification commitment to affected clients.
Compliance posture
Our operating controls are aligned to SOC 2 and ISO 27001 principles; certification status is shared under NDA on request.