Security in how we build and operate

Our architectures follow established best practices. For AWS workloads, we use the AWS Well-Architected Framework to guide decisions across operational excellence, security, reliability, performance efficiency, cost optimization and sustainability.

Access control, infrastructure as code and operational responsibilities are part of the architecture. For AI agents, we also define what the system may do on its own and how it accesses the customer's data and tools.

Our vulnerability assessment process uses automated scans and findings reports to identify issues before delivery. The reports provide the basis for remediation work.

We address findings and retest the changes to check that the fixes resolve the issues identified. Assessment, remediation and retesting are part of our engineering work.

For systems we maintain, security updates and incident response continue under the maintenance agreement. Our AWS managed services also cover threat and vulnerability detection, monitoring, backup and recovery, under agreed service levels.