| Managed devicesStudio desktops we own. USB storage, printing and personal email blocked; screens lock after five minutes. | Device policy scanned nightly | Compliance export, monthly |
| Single sign-onYour tools through single sign-on with multi-factor on every login. | Leavers removed the same day | Joiner and leaver log |
| Clean-desk floorsNo paper, badge-controlled doors, cameras on every production area. | Floor walk every shift | Shift lead checklist |
| No personal phonesLockers at the floor entrance; second-factor codes from hardware keys. | Spot checks by security staff | Incident register |
| Least-privilege accessEach role sees only the fields it needs in your tools. | Account review with you, quarterly | Signed access review |
| Independent auditAn outside firm tests our security controls. | Once a year | Full report, under NDA |
| Data processing agreementYours or ours, naming every sub-processor. | Reviewed at every renewal | Signed DPA |
| Data stays with youCustomer records stay in your systems; our reports use counts, not exports. | Export rights disabled by default | Your tool’s admin settings |