Trust & security
How we protect your data and access
Clients trust us with access to their systems, so our own security has to meet the standard we advise. This page summarizes the practices behind that trust.
Data handling
We collect and keep only the client information needed to deliver agreed services. Client data is classified, stored in approved systems and retained only for the period the engagement and applicable law require.
- Data is used solely for the contracted purpose
- Client environments are documented in access-controlled repositories
- Data is returned or securely deleted at the end of an engagement on request
Access control
Access follows least privilege. Staff receive only the access their role and assigned clients require, and it is removed when the need ends.
- Multi-factor authentication on all staff and administrative accounts
- Unique named accounts, no shared credentials
- Privileged access recorded and reviewed periodically
Encryption
Information is encrypted in transit and at rest in the systems we operate. We apply current protocols and manage keys so that access is limited and revocable.
- TLS for all web and service connections
- Encrypted storage for laptops, servers and backups
- Secrets held in managed vaults rather than documents
Monitoring
Our own environment is covered by the same kind of monitoring we provide to clients, with logging, alerting and incident response procedures that are exercised regularly.
- 24/7 monitoring of staff endpoints and infrastructure
- Centralized logs retained for investigation
- Incident response plan tested through tabletop exercises
Vendor management
Third parties that handle client information or support our delivery are assessed before onboarding and reviewed on a recurring basis, including field partners who support on-site work.
- Security review before a vendor is approved
- Contractual confidentiality and security obligations
- Field partners work under our procedures and supervision
Responsible disclosure
If you believe you have found a vulnerability in vinemobile.net, we want to hear about it. Reports are made through the contact form using the topic "General enquiry", and we respond within 3 business days.
Our disclosure policy includes safe harbor for good-faith research. Read the full policy on the security disclosure page.
Let’s build what’s next
Ready to Secure, Modernize, and Scale Your IT?
Talk to our experts and discover how vinemobile can help you achieve your business goals.