Security

Our security commitment

Clients trust us with sensitive systems and data, and we treat that as a responsibility. Our security practices are designed to protect:

• Client confidential information
• Source code and intellectual property
• System access and credentials
• Business-critical operations

Access controls

Authentication

• Multi-factor authentication on systems that support it
• Regular access reviews and removal of access that is no longer needed

Authorization

• Principle of least privilege
• Time-limited access for engagements
• Separate environments for each client

Data handling

• Client data is isolated per engagement
• No commingling of client data
• Secure deletion or return of client data when an engagement ends
• Data retention follows the schedule in our Privacy Policy

How we collect and retain personal information is described in our Privacy Policy.

People and vendors

People

• Confidentiality agreements
• Clear security responsibilities

Vendors

• Review of vendors that handle client data
• Limited data sharing

Compliance requirements

We work with clients to meet their specific compliance requirements during engagements.

Incident response

We maintain incident response procedures, including:

• Defined escalation paths
• Client notification procedures
• Post-incident analysis and improvement

In the event of a security incident affecting client data, we will notify affected parties without undue delay.

Reporting security issues

If you discover a security vulnerability or have security concerns, please contact us:

• Security team: security@mysioslabs.com

We appreciate responsible disclosure and will work with you to address any issues promptly.