Delivery assurance
Your data and systems, protected in every engagement.
We apply consistent security, privacy and access practices across all our work. This page explains how Hinkor protects your data and systems, and how we support your vendor security reviews.
Overview
How this works in practice.
Trust, Security & Compliance explains how Hinkor protects your data and systems throughout every engagement.
Security requirements and data handling are agreed before work begins. Access is limited, approved by you and removed promptly, and team members are trained and bound by confidentiality agreements. Incidents are reported under agreed procedures, and we support your vendor security reviews with documentation and evidence.
The result is confidence that working with Hinkor does not add risk to your organization.
- Access
- Least privilege, approved by you
- People
- Security training and confidentiality agreements
- Data
- Handled according to your policies and contract
- Assurance
- Security documentation available on request
A good fit when
- You can complete vendor security reviews quickly
- Access to your systems is controlled and auditable
- Your data is handled according to your policies
- Security incidents are reported promptly and transparently
What the engagement includes
- Information security policies. Documented policies cover access, acceptable use, data handling, incident response and supplier management.
- Controlled access. Team members receive only the access they need, approved by you and removed promptly when no longer required.
- Trained, accountable people. Team members complete security awareness training and sign confidentiality agreements before accessing client systems.
- Data protection and privacy. Client data is handled according to your contract, applicable privacy laws and agreed data residency requirements.
- Incident response. Security incidents affecting your data or systems are reported to you promptly and handled under agreed procedures.
How it works
The steps we follow.
01
Onboard
Agree data handling, access, security requirements and contacts before work begins.
02
Control
Grant least-privilege access, using your identity systems and approved devices where possible.
03
Monitor
Review access regularly and report security incidents to you under agreed procedures.
04
Offboard
Remove access and return or delete data when people leave or the engagement ends.
Related
Keep reading.
FAQ
Questions about trust, security & compliance
If your question is not here, ask it directly.
Ask a direct questionWhich security certifications does Hinkor hold?
Certifications held by Hinkor are listed on this page as they are achieved. Where a certification is not yet in place, we share our policies and control evidence to support your vendor review.
Can you complete our security questionnaire?
Yes. We complete vendor security questionnaires and provide supporting policies and documentation, under a confidentiality agreement where required.
Will your team use our devices and accounts?
Where you require it, team members work on your managed devices or virtual desktops, using accounts in your identity system. Otherwise, Hinkor devices are managed to our security standards.
What happens to our data when the engagement ends?
Access is removed, and client data is returned or securely deleted according to the contract. Confirmation can be provided on request.
Is this the same as your cybersecurity services?
No. This page describes how Hinkor protects your data during our work. Our cybersecurity services, such as Security Engineering and Managed Security (SOC), protect your own systems and organization.
Next step
Have a vendor security review to complete?
Talk to our team about your security, privacy and compliance requirements.