Security
Security & Compliance
We build for environments where security is a requirement, not a feature. Our practices are aligned with NIST SP 800-171 for protecting Controlled Unclassified Information (CUI), and we are preparing for CMMC Level 1. We do not currently hold a CMMC certification.
Access control
- Least-privilege access for every account.
- MFA on all systems.
Data handling
- Encryption in transit and at rest.
- No CUI stored on personal devices.
Secure development
- Code review on every change.
- Dependency scanning.
- Version control for all code.
Incident response
- Documented incident response process.
- Government notification within required timelines.
Questions about our security posture? Contact us