Security practices
We use least-privilege access, multifactor authentication where supported, secure configuration, patch discipline, encryption-capable platforms, and documented operational procedures appropriate to each engagement.
Transparency by design
Trust Center
A clear view of how SCSI approaches security, privacy, resilience, and responsible service delivery.
Data handling & retention
We limit collection to information needed to provide or improve services. Access is restricted by role, and retention is based on operational, contractual, security, and legal needs.
Business continuity
We plan for service disruption with documented recovery priorities, protected backups where included in scope, tested escalation paths, and communication procedures.
Secure service delivery
Changes are scoped, authorized, documented, and validated. Security recommendations are risk-based and tailored to the client environment.
Responsible disclosure
If you believe you found a security issue involving SCSI, email security@scsiva.net with the affected system, steps to reproduce, and potential impact. Please avoid accessing or changing data that is not yours.
Need documentation or have a security question?
Contact our team so we can understand your due-diligence requirements and provide the information appropriate to the engagement.