Security and privacy
Security
Working in your tools means access to your clients' systems. Here is how we protect it.
Controls
How we protect your clients' systems
We go live in April 2027. These are the controls the service is built on from the first day.
Managed devices only
Company-managed, encrypted laptops using Intune and Defender. No personal devices.
No local client data
No client data is stored locally. Access is only through your tools.
MFA and least privilege
MFA everywhere, with separate least-privilege accounts for each MSP.
Checked people
Background checks and confidentiality agreements for our engineers.
Data processing agreement
Covers Australian Privacy Principle 8 and Sri Lanka's Personal Data Protection Act.
Essential Eight aligned
Our controls are aligned with the ASD Essential Eight.
One-hour incident reporting
Any incident is reported to you within one hour.
Resilient office
Backup internet and power at our Colombo office.
Want to see the detail?
We will share our security policies and data processing agreement on request.