Speed never comes at the expense of security. AI accelerates how we build, but experienced people stay accountable for every change, and we work inside your controls — not around them. This page summarizes the standards and practices we follow on every engagement.
Access & least privilege
Our consultants work with the minimum access required for the task, granted for the duration it is needed and removed when the engagement ends. We use your provisioning and SSO/MFA wherever possible, never share credentials, and prefer sandbox and scratch environments for build and testing before anything reaches production.
Human accountability at every gate
AI drafts, generates and tests — but a named, experienced person reviews and approves every design decision, code change and release. Nothing ships on AI output alone. Changes are documented, reversible, and traceable so you always know what changed, why, and who signed off.
Data handling & privacy
We collect and touch only the data an engagement requires, handle it according to your data-classification and retention policies, and return or delete working copies when work concludes. We do not use client data to train AI models, and we keep client environments and data logically separated. Our website privacy practices are described in our Privacy Policy.
Secure delivery & environments
We follow secure development practices throughout the AI-native lifecycle: version-controlled change management, environment separation (dev / test / production), AI-generated plus human-reviewed test coverage, and pre-release risk and security scans. Secrets and keys are stored in managed secret stores, never in code or documents.
Built on the Salesforce security model
Our work runs on Salesforce’s enterprise security foundation — profiles, permission sets, sharing rules, field-level security, Shield encryption and event monitoring where licensed. We design to the principle of least privilege inside the org and configure Agentforce and automation with guardrails and human-in-the-loop review.
Aligning to your compliance requirements
We adapt to the standards our clients operate under — for example SOC 2, ISO 27001, HIPAA, FERPA and GDPR — and work within your policies, DPAs and security reviews. We are glad to complete security questionnaires and sign confidentiality and data-processing agreements before an engagement begins.
Responsible AI
We use AI to accelerate delivery, with clear boundaries: grounded on approved data, scoped to defined tasks, guarded against unsafe actions, and always reviewed by a person before it affects your systems or customers.
Report a concern
To request our security details, complete a questionnaire, or report a security concern, email [email protected] and we’ll respond promptly.