Project-specific controls
Security requirements are established from the application, data, users and operating context. The proposal identifies the controls and reviews included in scope.
Identity and data boundaries
Discuss authentication, permissions, data classification, access, retention and appropriate auditability. The actual implementation must be tested in its deployment context.
Review and operations
Agree the review scope, remediation process, monitoring responsibilities and incident-handling arrangements. Continuous coverage is not implied by a website claim.
Certification claims
This website does not claim SOC 2 or ISO certification. Any procurement evidence, independent review or certification must be supplied and verified for the relevant entity and scope.