Identity & Access
Password hashing, email verification, optional authenticator MFA, invitation-based access, session revocation and role controls.
OpsKey CRM provides application-level safeguards and operational controls. Hosting, backup, legal and assurance requirements are finalised according to the selected deployment model.
Password hashing, email verification, optional authenticator MFA, invitation-based access, session revocation and role controls.
Workspace-scoped records, restricted internal routes and controlled customer-facing portal access.
Private storage path, allowlisted file types, upload limits, optional ClamAV scanning and download logging.
Audit logs, security-event records, download logs, incident register and CSV audit export.
Public privacy-request submission and operator-side request register for access, correction, deletion and closure workflows.
Retention profile, deployment model, data-region record, incident register and backup verification register.
These topics can be included in enterprise or public-sector onboarding plans. They are not presented as completed certifications or guarantees unless separate evidence is supplied.
Certification can be pursued through an authorised certification body as a later-stage programme.
A SOC 2 report can be considered when enterprise buyer requirements justify the external examination.
Arrange a scoped third-party test before publishing any penetration-tested statement.
Monitoring supports evidence gathering. A binding uptime commitment must be defined in a signed agreement.
Security questionnaires, deployment scope and procurement documents are prepared according to each buyer's requirements.
Official marks are displayed only when the applicable approval, report or brand authorisation is available.