SEC/X0 · Security
Access, data and ownership.
For integration, data and software engagements, where we work inside your systems of record: what we need from those systems, what we do with it, and what you keep when the work is done.
Access
You create the accounts. We work in named accounts in your systems, created and controlled by you, with the least access the work needs. You can see what they did, and you remove them when you decide.
Credentials move one way. Exchanged through a password manager or your own secrets store, never over email or chat.
Data
Your data stays in your systems. We build and test in a sandbox or test environment where your systems offer one, and against a limited dataset where they don't.
Nothing is kept after. Working copies used during a build or a migration are deleted at handoff, and you can ask for that in writing.
Documentation and handoff
Every build ships with a runbook. What connects to what, how each record is mapped, how errors are handled and where they land, and how to change it. Your team can run it, or we can.
Ownership
You own what we build. When the build is paid for, the code, the configurations, the mappings and the documentation are yours. Tools and know-how we brought to the work stay ours.
It runs in your environment. What we build runs in your systems and accounts by default. If the scope puts any of it in ours, it comes with a documented path to move it.
Agreements
NDAs and questionnaires. We sign your NDA before the scope session and complete security questionnaires as part of it.
Operations
When we run a connection, we monitor it. Failures retry, undeliverable records go to a holding queue, and a person is alerted. You hear from us before you find a bad number.
Questions before a scope session: info@sparkglobal.com.